Slashdot Mirror

Jolla released their Android-free mobile Linux OS (Sailfish) on their own smartphones, "but has always intended to offer it to other manufacturers," according to Silicon. The next Sailfish smartphone was the Inex Aqua Fish, and people with Sony Xperia phones can now also run Sailfish through the Sony Open Devices Program. But their next big customer is the nation of China. Mickeycaskill quotes Silicon. The Sailfish China Consortium has gained the exclusive rights and license to develop a Chinese operating system based on Sailfish. Russia is also using Sailfish to build a national mobile OS in a bid to reduce its reliance on Western technology and reduce the risk of foreign surveillance. Jolla claimed that there have been many attempts to build a national OS on Android but these had been unsuccessful because of Google's control over the code.
One of the consortium's investors claims "several" major Chinese companies are already interested in joining them, adding "I have been closely following Sailfish OS development, and seen many Chinese projects fail, while Jolla's Sailfish OS has been steadily progressing. Sailfish OS is the only viable alternative for China."

Mickeycaskill quotes Silicon: Just to illustrate that you can never be too careful, cybersecurity specialist Trend Micro has confirmed that one of the blogs it uses to communicate with customers was itself the victim of a content spoofing attack. The culprits exploited a vulnerability in WordPress to inject fake content onto the blog before it was removed by Trend Micro and the bug fixed... "Unfortunately there are many different URLs attackers can use to carry out the same attack, so a couple of fake 'articles' ended up posted on CounterMeasures," head of security research Rik Ferguson told Silicon. "We have responded and shut down the vulnerability completely to resolve the issue."
The chairman of Trend Micro claimed in 2011 that open source software was inherently less secure than closed source -- but instead of blaming Wordpress, Ferguson "said it goes to show how breaches are an unfortunate fact of life and that companies should be judged on how they respond... 'Of course technology and best practice can mitigate the vast majority of intrusion attempts, but when one is successful, even one as low-level as this, you are more defined by how you respond than you are by the fact that it happened.'"

Mickeycaskill quotes a report from Silicon.co.uk: Rail passengers could use fingerprints or iris scans to pay for tickets and pass through gates, under plans announced by the UK rail industry. In its current form, the mobile technology is intended to allow passengers to travel without tickets, instead using Bluetooth and geolocation technology to track a passenger's movements and automatically charge their travel account at the end of the day for journeys taken. The Rail Delivery Group (RDG), which represents train operators and Network Rail, said further development could see passengers identified using biometric technology in a way similar to the facial-recognition schemes used at some UK airports to speed up border checks. The RDG said more than 200 research, design and technology projects have been identified to increase the railways' capacity and improve customer service. Other projects include new seat designs that could improve train capacity by up to 30 percent and folding seats that could boost space during peak times, including tables that could fold into seats.

Mickeycaskill quotes a report from Silicon.co.uk: The medals for the Tokyo 2020 Olympic and Paralympic Games will be made from recycled mobile phones in an effort to engage the Japanese nation and meet sustainability criteria. The Tokyo 2020 organizing committee has called on the Japanese public to donate their "discarded or obsolete electronic devices" to provide the eight tonnes of metal required for the production of the medals. The production process will reduce this eight tonnes down to around two, enough to produce 5,000 Olympic and Paralympic medals. Collection boxes will be installed in the stores of partner organizations NTT DOCOMO and the Japan Environmental Sanitation Center (JESC) from April, with the collection ending when the eight-tonne target is reached.

Mickeycaskill quotes a report from Silicon.co.uk: Accenture research has found Blockchain technology has the potential to reduce infrastructure costs by an average of 30 percent for eight of the world's ten biggest banks. That equates to annual cost savings of $8-12 billion. The findings of the "Banking on Blockchain: A Value Analysis for Investment Banks" report are based on an analysis of granular cost data from the eight banks to identify exactly where value could be achieved. A vast amount of cost for today's investment banks comes from complex data reconciliation and confirmation processes with their clients and counterparts, as banks maintain independent databases of transactions and customer information. However, Blockchain would enable banks to move to a shared, distributed database that spans multiple organizations. It has become increasingly obvious in recent months that blockchain will be key to the future of the banking industry, with the majority of banks expected to adopt the technology within the next three years.

The free iOS version of the Tor browser "sparked a tidal wave of interest" after its release in December, according to Silicon.co. Mickeycaskill writes: The cost has been scrapped due to developer Mike Tigas' worries that the price was limiting access to anonymous browsing for those who need it most. "Given recent events, many believe it's more important than ever to exercise and support freedom of speech, privacy rights, and digital security," Tigas wrote in a blog post. "I think now is as good a time as ever to make Onion Browser more accessible to everyone."
"I'm still a little terrified that I've made this change," Tigas adds. For four years the Tor Onion browser was available on the Apple App Store for $0.99, the lowest non-free price allowed by Apple, providing a "reliable" income to Tigas which helped him move to New York for a new job while allowing him "the economic freedom to continue working on side projects that have a positive impact in the world." Tigas also writes that "there's now a Patreon page and other ways to support the project."

Last month the Tor Project also released the first alpha version of the sandboxed Tor Browser.

Mickeycaskill quotes a report from Silicon.co.uk: Switzerland has agreed its own new data transfer agreement with the United States, basing the framework on the deal struck by the European Union (EU) following the invalidation of Safe Harbour. The previous arrangement was invalidated because of concerns about U.S. mass surveillance but Switzerland says the new Swiss-U.S. Privacy Shield will allow Swiss companies to transfer customer data without the need for additional contractual guarantees. The Swiss Federal Council, a seven member executive council that is effectively the head of government in Switzerland, claim citizens will benefit from additional protections and the ability to contact an ombudsman about data issues. Although not part of the EU, Switzerland is a member of the European Economic Area (EEA) and has several bilateral agreements with the EU that sees it adopt many of the bigger bloc's policies. The Federal Council says the alignment between the EU and the Swiss transatlantic data sharing partnerships is good news for multinational organizations.

Mickeycaskill quotes a report from Silicon.co.uk: Switzerland has agreed its own new data transfer agreement with the United States, basing the framework on the deal struck by the European Union (EU) following the invalidation of Safe Harbour. The previous arrangement was invalidated because of concerns about U.S. mass surveillance but Switzerland says the new Swiss-U.S. Privacy Shield will allow Swiss companies to transfer customer data without the need for additional contractual guarantees. The Swiss Federal Council, a seven member executive council that is effectively the head of government in Switzerland, claim citizens will benefit from additional protections and the ability to contact an ombudsman about data issues. Although not part of the EU, Switzerland is a member of the European Economic Area (EEA) and has several bilateral agreements with the EU that sees it adopt many of the bigger bloc's policies. The Federal Council says the alignment between the EU and the Swiss transatlantic data sharing partnerships is good news for multinational organizations.

Reader Mickeycaskill writes: For the 24th year in a row, IBM received the most patents of any company in the US. But for the first time it got more than 8,000 -- the first firm in any industry to do so. In total, its inventors were granted 8,088 patents in 2016, covering areas as diverse as artificial intelligence (AI), cognitive computing, cloud, health and cyber security.
That's equal to more than 22 patents a day generated by its researchers, engineers and designers, with more than a third of the patents relating to AI, cognitive computing and cloud computing alone. IBM is betting big on cloud and other services, having spun off its hardware units like servers and PCs to Lenovo. The other nine companies in the top ten list of 2016 US patent recipients consist of: Samsung electronics (with 5,518 patents), Canon (3,665), Qualcomm (2,897), Google (2,835), Intel (2,784), LG Electronics (2,428), Microsoft (2,398), Taiwan Semiconductor Manufacturing Co. (2,288) and Sony (2,181).

Mickeycaskill writes: Nintendo's Super Mario Run was downloaded more than 40 million times in the first four days it was available. But an Android version has yet to materialize. An official release is on the way, but cybercriminals are taking advantage of this vacuum by spreading malicious apps masquerading as the real thing. The "Android Marcher trojan" appears as a fake landing page advertising the release of the game, where it can be downloaded onto users' devices. It then targets financial and banking apps and can modify your settings and read your contacts. The popularity of Pokemon GO last year saw similar scams emerge as users waited for the game.

Reader Mickeycaskill writes: The extra leap second added on to the end of 2016 may not have had an effect on most people, but it did catch out a few web companies who failed to factor it in. Web services and security firm CloudFlare was one such example. A small number of its servers went down at midnight UTC on New Year's Day due to an error in its RRDNS software, a domain name service (DNS) proxy that was written to help scale CloudFlare's DNS infrastructure, which limited web access for some of its customers. As CloudFlare explained, a number went negative in the software when it should have been zero, causing RRDNS to "panic" and affect the DNS resolutions to some websites. The issue was confirmed by the company's engineers at 00:34 UTC on New Year's Day and the fix -- which involved patching the clock source to ensure it normalises if time ever skips backwards -- was rolled out to the majority of the affected data centres by 02:50 UTC. Cloudflare said the outage only hit customers who use CNAME DNS records with its service. Google works around leap seconds with a so-called "smearing" technique -- running clocks slightly slower than usual on its Network Time Protocol servers.

Mickeycaskill writes: Nintendo will pay up to $20,000 for system and software vulnerabilities in the Nintendo 3DS family of handheld gaming consoles. The company is looking to prevent activities such as piracy, cheating and the circulation of inappropriate content to children. The stated goal is to "provide a secure environment for our customers so that they can enjoy our games and services. In order to achieve this goal, Nintendo is interested in receiving vulnerability information that researchers may discover regarding Nintendo's platforms." Silicon.co.uk reports: "Rewards will range from $100 to $20,000, with one given per 'qualifying piece of vulnerability information.' Hackers looking to claim a reward will have to provide Nintendo with either a proof-of-concept or a piece of functional exploit code in order to qualify."