Slashdot Mirror

Citizen Lab has been studying information controls since 2001, and this week their director -- a Toronto political science professor -- revealed how governments (including Ethiopia's) are using powerful commercial spyware. Slashdot reader mspohr shared their report: We monitored the command and control servers used in the campaign and in doing so discovered a public log file that the operators mistakenly left open... We were also able to identify the IP addresses of those who were targeted and successfully infected: a group that includes journalists, a lawyer, activists, and academics... Many of the countries in which the targets live -- the United States, Canada, and Germany, among others -- have strict wiretapping laws that make it illegal to eavesdrop without a warrant... Our team reverse-engineered the malware used in this instance, and over time this allowed us to positively identify the company whose spyware was being employed by Ethiopia: Cyberbit Solutions, a subsidiary of the Israel-based homeland security company Elbit Systems. Notably, Cyberbit is the fourth company we have identified, alongside Hacking Team, Finfisher, and NSO Group, whose products and services have been abused by autocratic regimes to target dissidents, journalists, and others...

Remarkably, by analyzing the command and control servers of the cyber espionage campaign, we were also able to monitor Cyberbit employees as they traveled the world with infected laptops that checked in to those servers, apparently demonstrating Cyberbit's products to prospective clients. Those clients include the Royal Thai Army, Uzbekistan's National Security Service, Zambia's Financial Intelligence Centre, and the Philippine president's Malacañang Palace. Outlining the human rights abuses associated with those government entities would fill volumes.... Governments like Ethiopia no longer depend on their own in-country advanced computer science, engineering, and mathematical capacity in order to build a globe-spanning cyber espionage operation. They can simply buy it off the shelf from a company like Cyberbit. Thanks to companies like these, an autocrat whose country has poor national infrastructure but whose regime has billions of dollars, can order up their own NSA. To wit: Elbit Systems, the parent company of Cyberbit, says it has a backlog of orders valuing $7 billion.
Reached for comment, Cyberbit said they were not responsible with what others do with their software, arguing that "governmental authorities and law enforcement agencies are responsible to ensure that they are legally authorized to use the products in their jurisdictions."

Quoting snydeq: "In the fast-paced world of technology, complacency can be a career killer," Paul Heltzel writes in an article on 20 ways to kill your IT career without knowing it. "So too can any number of hidden hazards that quietly put your career on shaky ground -- from not knowing your true worth to thinking you've finally made it. Learning new tech skills and networking are obvious ways to solidify your career. But what about accidental ways that could put your career in a slide? Hidden hazards -- silent career killers? Some tech pitfalls may not be obvious."
CIO's reporter "talked to a number of IT pros, recruiters, and developers about how to build a bulletproof career and avoid lesser-known pitfalls," citing hazards like burning bridges and skipping social events. But it also warns of the dangers of staying in your comfort zone too long instead of asking for "stretch" assignments and accepting training opporunities.

The original submission puts the same question to Slashdot readers. "What silent career killers have you witnessed (or fallen prey to) in your years in IT?"

"It's hard to overstate the enormous leap forward that astronomy took on August 17, 2017," reports an article shared by schwit1: On that day, astronomers bore witness to the titanic collision of two neutron stars, the densest things in the universe besides black holes. In the collision's wake, astronomers answered multiple major questions that have dominated their field for a generation. They solved the origin of gamma-ray bursts, mysterious jets of hardcore radiation that could potentially roast Earth. They glimpsed the forging of heavy metals, like gold and platinum. They measured the rate at which the expansion of the universe is accelerating. They caught light at the same time as gravitational waves, confirmation that waves move at the speed of light. And there was more, and there is much more yet to come from this discovery... "Now it's a question of, do we have the right instrumentation for doing all the follow-up work?" said Edo Berger, an astronomer at Harvard who studies explosive cosmic events. "Do we have the right telescopes? What's going to happen when we have not just one event, but one a month, or one a week -- how do we deal with that flood...?"

The August 17 gravitational wave gave astronomers a glimpse at an entirely different universe. For most of history, they've studied stars and galaxies, which seem static and unchanging from the vantage point of human timescales... But GW170817 revealed a universe alive, pulsating with creation and destruction on human timescales... [T]he event itself unfolded in less than three human-designated weeks. This faster timescale is "pushing the way astronomy is done," Berger said... In space, the Fermi space telescope glimpsed a burst of gamma radiation. Within an hour, astronomers made six independent discoveries of a bright, fast-fading flash: A new phenomenon called a kilonova... Nine days later, X-rays streamed in, and after 16 days, radio waves arrived, too. Each type of information tells astronomers something different. Richard O'Shaughnessy, an astronomer at the Rochester Institute of Technology, describes the discovery as a "Rosetta stone for astronomy."

"What this has done is provide one event that unites all these different threads of astronomy at once," he said. "Like, all our dreams have come true, and they came true now..." Thanks to the August 17 event, astronomers now know what to look for. Soon, they will be able to sift through an embarrassment of neutron-star mergers and other phenomena... And they are talking about how to turn their eyes to the sky, at a moment's notice, the next time the universe throws something big their way. "It's a wonderful time, it's a terrifying time," O'Shaughnessy said. "I can't really capture the wonder and the horror and glee and happiness."

turkeydance shares a report from RTV6, which cites a new editorial in the journal Science that explores the question, "Could VR field trips replace the real thing?" Virtual field trips have been around for a while, but they used to be pretty boring: some photos, some text -- basically a Wikipedia entry. But they've come a long way. Nearpod and Google Expeditions let students immerse themselves in places they couldn't normally visit, like Antarctica or even Mars. These virtual field trips are safer and easier to organize than real outings, and they might soon be cheaper, too. Douglas McCauley, assistant professor of ecology at the University of California, Santa Barbara, says traditional field trips have already declined under budget constraints, so schools might be tempted to simply make a switch. McCauley says he's excited about the possibilities of VR. Taking students back to prehistoric times or forward to witness the results of climate change could be a powerful teaching tool.

Solar power blossomed faster than for any other fuel for the first time in 2016, the International Energy Agency said in a report suggesting the technology will dominate renewables in the years ahead. From a report: The institution established after the first major oil crisis in 1973 said 165 gigawatts of renewables were completed last year, which was two-thirds of the net expansion in electricity supply. Solar grew by 50 percent, with almost half new plants built in China. "What we are witnessing is the birth of a new era in solar PV," Fatih Birol, executive director of the IEA, said in a statement accompanying the report published on Wednesday in Paris. "We expect that solar PV capacity growth will be higher than any other renewable technology through 2022." This marks the sixth consecutive year that clean energy has set records for installations. Mass manufacturing and a switch by governments away from fixed payments for renewables forced down the cost of wind and solar technology. The IEA expects about 1,000 gigawatts of renewables will be installed in the next five years, a milestone that coal only accomplished after 80 years. That quantity of electricity surpasses what's consumed in China, India and Germany combined.

Mark Gurman, writing for Bloomberg: Despite the strength of its brand, Apple occasionally releases a product to mediocre reviews -- remember the original Apple TV or Apple Watch? But reviewers have rarely been as grumpy as this month, when Apple unveiled its collection of new gadgets for the holidays. "I can't think of a single compelling reason to upgrade [to iPhone 8, or iPhone 8 Plus] from an iPhone 7 [which was launched last year]," wrote Nilay Patel of The Verge. Another potential sign of trouble: the iPhone 8 models didn't sell out during pre-orders, another rare occurrence for Apple phones. [...] Reviewing the new Apple Watch Series 3 model, The Wall Street Journal's Joanna Stern wrote "On the AT&T-connected models, the cellular connection dropped, calls were often choppy and Siri sometimes failed to connect. On the one that ran on T-Mobile, I experienced several dropped connections." The Verge's Lauren Goode noticed a serious connection issue as well, saying the device "would appear to pick up a single bar of some random Wi-Fi signal, and hang on that, rather than switching to LTE." [...] Reviewing the Apple TV 4K, The Verge's Patel noted the device's high price, a lack of 4K support in major apps including YouTube, and a lack of support for the Dolby Atmos audio standard. Reuters reported on Friday: Hundreds of people usually gather at Apple's Sydney city store with queues winding down the town's main street, George Street, when there is a new product release. But there were fewer than 30 people lining up before the store opened on Friday, according to a Reuters witness. While the number of people queuing up outside Apple stores have dropped over the years with many opting for online purchases, the weak turnout for the latest iPhone has partly been due to poor reviews. Over at Financial Times, Tim Bradshaw reports: "I think demand is down from last year, for no other reason than you have another flagship phone," said Neil Cybart, an Apple analyst at Above Avalon. "A portion of the iPhone launch demand is not materialising quite yet." That could leave this weekend's initial sales lower than at any point since the iPhone 6 first launched in 2014, Mr Cybart added. Apple's decision to increase prices for the iPhone 8 compared with last year's model and a less aggressive launch push by mobile carriers could also affect demand.

A startup called Proterra has set the world record for the furthest distance any electric vehicle has managed before recharging. The Catalyst E2 Max electric bus drove 1,101.2 miles on a single charge, beating the previous record-holder, a one-seat experimental car nicknamed "Boozer." Engadget reports: Not surprisingly, a bus can hold a much larger battery than just about any regular car. The Catalyst E2 Max carries 660kWh, or nearly nine times the capacity of a 75kWh Tesla Model S. Also, Proterra was driving in optimal conditions, with no passengers, no stops and a gentle test track. It'd be another story with a fully-laden bus wending its way through a city. Even so, that kind of range is very promising. In many cases, it could likely handle a long bus route for several hours -- it might only need to recharge at the end of a driver's shift. While it could take an hour or more to top up even with Proterra's fast charging system, bus drivers are no strangers to changing vehicles. The first E2 series buses are due to reach Los Angeles streets later in 2017, so it might not be long before you can witness this longevity first-hand. The company released a video of the record-setting feat on YouTube.

An anonymous reader quotes a report from CoinDesk: The cryptocurrency markets continued to rise today as the asset class observed strong gains, including most notably, perhaps, litecoin. The digital asset once dubbed "the silver to bitcoin's gold" passed $78 to achieve a new all-time high at 06:54 UTC this morning, according to CoinMarketCap data. Standing at $75.57 at press time, litecoin has increased by 17.28 percent over the past 24 hours and an astonishing 49.37 percent over the last week. Long in the doldrums, litecoin has seen a resurgence since its community moved to activate Segregated Witness (SegWit) on its network early in May -- a scaling solution that also opens the door to new features such as smart contracts going forward. Taking a wider view, the combined market capitalization of all digital currencies attained a new record high today, and had passed $175 billion at press time. That's up from $170.8 billion just yesterday, also going by data from CoinMarketCap.

schwit1 shares a report from The Hill: A hacker in Ukraine who goes by the online alias "Profexer" is cooperating with the FBI in its investigation of Russian interference in the U.S. presidential election, The New York Times is reporting. Profexer, whose real identity is unknown, wrote and sold malware on the dark web. The intelligence community publicly identified code he had written as a tool used in the hacking of the Democratic National Committee ahead of last year's presidential election. The hacker's activity on the web came to a halt shortly after the malware was identified. The New York Times, citing Ukrainian police, reported Wednesday that the individual turned himself into the FBI earlier this year and became a witness for the bureau in its investigation. FBI investigators are probing Russian interference efforts and whether there was coordination between associates of President Trump's campaign and Moscow. Special counsel Robert Mueller is heading the investigation.

Merely weeks after it was announced that Bitcoin was splitting into two separate entities, the initial version of bitcoin and it's new "bitcoin cash," the network is adding a third version, according to a report. From the article: On Wednesday, a group of bitcoiners scheduled yet another split for the network in November, which would create a third version of bitcoin. So, what makes this version different from the others? Right now, the bitcoin network can sometimes take a long time to process transactions due to so many people using it. This is because the "blocks" of transaction data that get added to bitcoin's public ledger, the blockchain, are getting full. In the weeks preceding the fork, bitcoin coalesced around a solution called "segregated witness," which will change how data is stored in blocks to free up some space when it kicks in later in August. But the size of the blocks themselves will stay at one megabyte on the original bitcoin blockchain. Still, some bitcoiners maintained that the only way to speed bitcoin up for the foreseeable future was to increase the size of blocks themselves. So, a group of bitcoin companies and developers got together and launched a fork called bitcoin cash, which does not include segregated witness. It bumped the size of blocks up to a maximum of eight megabytes. That fork was widely anticipated to be a failure before it happened, but at the time of writing, bitcoin cash is trading above $300 USD per coin, which is comparable to cryptocurrencies like ethereum. Sounds like everyone got what they wanted, right? Oh, no. There's a third group of bitcoin developers, companies, and users who advocate for a "best of both worlds approach." This group includes Bitmain, the largest bitcoin infrastructure company in the world, and legendary bitcoin developer Jeff Garzik. They got together back in May and signed what is known as the "New York Agreement," which bound them to implement a two megabyte block size increase alongside segregated witness via a hard fork within six months of the time of signing. They call the fork Segwit2x. Now, that's exactly what's happening. According to an announcement posted to the Segwit2x GitHub repository, a bitcoin block between one and two megabytes will be created at block 494,784.

Josh Schwartz, Salesforce's director of offensive security, and John Cramb, a senior offensive security engineer, have been fired by the company after they gave talk at the Defcon security conference talk in Las Vegas last month, reports ZDNet. Schwartz and Cramb were presenting the details of their tool, called Meatpistol, a "modular malware implant framework (PDF)" similar in intent to the Metasploit toolkit used by many penetration testers. The tool, "pitched as taking 'the boring work' out of pen-testing to make red teams, including at Salesforce, more efficient and effective", was anticipated to be released as open source at the time of the presentation, but Salesforce has held back the code. From the report: [...] The two were fired "as soon as they got off stage" by a senior Salesforce executive, according to one of several people who witnessed the firing and offered their accounts. The unnamed Salesforce executive is said to have sent a text message to the duo half an hour before they were expected on stage to not to give the talk, but the message wasn't seen until after the talk had ended. The talk had been months in the making. Salesforce executives were first made aware of the project in a February meeting, and they had signed off on the project, according to one person with knowledge of the meeting. The tool was expected to be released later as an open-source project, allowing other red teams to use the project in their own companies. But in another text message seen by Schwartz and Cramb an hour before their talk, the same Salesforce executive told the speakers that they should not announce the public release of the code, despite a publicized and widely anticipated release. Later, on stage, Schwartz told attendees that he would fight to get the tool published.

An anonymous reader writes: A hacker says he turned finding and exploiting flaws in popular MMO video games into a lucrative, full-time job. Manfred's character is standing still in the virtual world of the 2014 sci-fi online multiplayer game WildStar Online. Manfred, the real life person behind the character, is typing commands into a debugger. In a few seconds of what seems to be an extremely easy hack, Manfred's virtual currency skyrockets up to more than 18,000,000,000,000,000,000, or 18 quintillion. I'm watching this hack in a demo video recorded by Manfred as I stand next to him in a Las Vegas bar on Thursday. Manfred, who asked me not to reveal his real name, says he has been hacking several video games for 20 years, making a real-life living by using hacks like the one I just witnessed. His modus operandi has changed slightly from game to game, but, in essence, it consisted of tricking games into giving him items or currency he doesn't have a right to have. He would then sell those items and currency to other players (for real money) or wholesales them to online gray markets, such as the Internet Game Exchange, that then would sell those goods to individual players. At the current exchange rate, Manfred estimates he has $397 trillion worth of WildStar gold. This is obviously an outlandish number, but, essentially, his income was only limited by the real-life market for the in-game currency. When I spoke to Manfred ahead of his talk at the Def Con hacking conference, he said he wanted to go in, give his demo, and go out "as a ghost," never to be seen or heard from again. He said he wanted to be "invisible," just like he's been for the past two decades. He said he's found more than 100 publicly unknown vulnerabilities in more than 20 online video games, making hacking and trading virtual goods into his full time job.

bsharma shares a report from Phys.Org: August 21st will bring a history-making opportunity for the entire United States. On that day, every person in the country, including Hawaii and Alaska, will have an opportunity to witness at least a partial solar eclipse as the moon moves in front of the Sun. If you have the good fortune to be along the path of totality, stretching from Oregon to South Carolina, you will get to witness one of the most awe-inspiring views in nature -- the wispy wonders of the solar corona. But there is more to the corona than one might initially realize.

Dr. Gordon Petrie from the National Solar Observatory (NSO) explains: "The corona might look like it's a fuzzy halo around the Sun, but it actually has quite a lot of structure to it. The Sun has a magnetic field that, at first glance, might remind us of the middle-school experiment where you sprinkle iron filings over a bar magnet to get a butterfly shape. However, on closer inspection, it is far more complicated than that. Since we are exactly one solar rotation away from the solar eclipse, we're able to use today's observations to predict the structure of the corona on Aug. 21st," says Petrie. "The corona is not likely to change too much between now and the eclipse, unless we get lucky and a large active region appears! We expect to see faint, straight structures protruding from the north and south poles of the Sun -- these are the polar plumes. We will be able to see brighter bulbs of material closer to the equator -- these are called helmet streamers."

An anonymous reader quotes a report from The Hacker News: Swedish media is reporting of a massive data breach in the Swedish Transport Agency (Transportstyrelsen) after the agency mishandled an outsourcing deal with IBM, which led to the leak of the private data about every vehicle in the country, including those used by both police and military. The data breach exposed the names, photos and home addresses of millions of Swedish citizen, including fighter pilots of Swedish air force, members of the military's most secretive units, police suspects, people under the witness relocation program, the weight capacity of all roads and bridges, and much more. The incident is believed to be one of the worst government information security disasters ever.

In 2015, the Swedish Transport Agency hand over IBM an IT maintenance contract to manage its databases and networks. However, the Swedish Transport Agency uploaded IBM's entire database onto cloud servers, which covered details on every vehicle in the country, including police and military registrations, and individuals on witness protection programs. The transport agency then emailed the entire database in messages to marketers that subscribe to it. And what's terrible is that the messages were sent in clear text. When the error was discovered, the transport agency merely thought of sending a new list in another email, asking the subscribers to delete the old list themselves.

pogopop77 shares a report from Ars Technica: An appeals court will soon decide whether the U.S. government can unmask anonymous users of Glassdoor -- and the entire proceeding is set to happen in secret. Federal investigators sent a subpoena asking for the identities of more than 100 anonymous users of the business-review site Glassdoor, who apparently posted reviews of a company that's under investigation for potential fraud related to its contracting practices. The government later scaled back its demand to just eight users. Prosecutors believe these eight Glassdoor users are "third-party witnesses to certain business practices relevant to [the] investigation." The name of the company under investigation is redacted from all public briefs. Glassdoor made a compromise proposal to the government: it would notify the users in question about the government's subpoena and then provide identifying information about users who were willing to participate. The government rejected that idea. At that point, Glassdoor lawyered up and headed to court, seeking to have the subpoena thrown out. Lawyers for Glassdoor argued that its users have a First Amendment right to speak anonymously. While the company has "no desire to interfere" with the investigation, if its users were forcibly identified, the investigation "could have a chilling effect on both Glassdoor's reviewers' and readers' willingness to use glassdoor.com," states Glassdoor's motion (PDF). The government opposed the motion, though, and prevailed in district court.

Peter Capaldi, the 12th Doctor Who, had said that he wanted to see a woman replace him in the Tardis, and so did former Doctor Who stars Billie Piper and Karen Gillan. And today it's official: "the 13th incarnation of Doctor Who will be portrayed by an actress," writes Slashdot reader Coisiche -- specifically Jodie Whittaker, who American viewers may remember from her performance as CIA officer Sandra Grimes in the 2014 mini-series "The Assets." The BBC reports: She was revealed in a trailer that was broadcast on BBC One at the end of the Wimbledon men's singles final... She will make her debut on the sci-fi show when the Doctor regenerates in the Christmas Day show... Whittaker said: "I'm beyond excited to begin this epic journey...with every Whovian on this planet. It's more than an honour to play the Doctor. It means remembering everyone I used to be, while stepping forward to embrace everything the Doctor stands for: hope... Doctor Who represents everything that's exciting about change."
Doctor Who's new showrunner said the 13th Doctor was always going to be a woman -- and that Whittaker was their first choice. "Jodie is an in-demand, funny, inspiring, super-smart force of nature and will bring loads of wit, strength and warmth to the role." Doctor Who #12 added that Whittaker "has above all the huge heart to play this most special part. She's going to be a fantastic Doctor." And Will Howells, who writes for the Doctor Who magazine, said "I don't think it's a risky choice at all but if a show that can go anywhere and do anything can't take risks, what can?"

New submitter ag144 writes: First time witnessed, the Large Hadron Collider finds predicted double-heavy particle. BBC reports: "Nearly all the matter that we see around us is made of neutrons and protons, which form the centers of atoms. These are made up of three smaller particles called quarks which can be either light or heavy. There are, however, six different types of quarks which combine in different ways to form other kinds of particle. Those that have been detected so far contain at most, one heavy quark. This is the first time that researchers have confirmed the existence of one with two heavy quarks. The research team will now measure the properties of the Xi-cc++ to establish how this new arrangement of quarks behaves and how the strong force holds the system together. They also expect to find more double heavy quark particles. Another unusual property of the particle is that it has two positive charges double that of the proton and it is four times heavier."

Samsung witnessed a reduction in the number of employees last year in its first manpower cut in seven years due mainly to its restructuring in China, South Korean newspaper Herald reports citing figured published by the company. From the report: The number of employees of the world's largest smartphone and memory chip manufacturer fell 5.2 percent to 308,745 last year from 325,677 the previous year, the data said. By region, domestic employees dropped 3.8 percent to 93,204, and those abroad declined 5.8 percent to 215,541. As of the end of last year, the percentage of the employees at Samsung's companies abroad dropped 0.4 percent to 69.8 percent. The number of Samsung employees in China fell 17.5 percent to 37,070 last year from 44,948 the previous year, while those in North and South America surged 8.5 percent to 25,988.

A British-based luxury phone maker which made its name selling $50,000 smartphones decked out in alligator leather and titanium and fitted with sapphire screens, has applied to the courts to be placed in administration after running of out money to pay staff and suppliers, (paywalled) reports British outlet The Times. In a witness statement filed in the High Court in London yesterday, the report adds, the company's last remaining director Jean-Charles Charki, said that Vertu was insolvent and unable to meet its June 30 payroll obligations of about 500,000 euros. From an earlier report: According to a juicy new report in the Telegraph, employees are worried about the future of the company after noticing that production had been running at reduced capacity. Employees are apparently worried about their unpaid wages, as well as pension contributions taken out of their paychecks without being added into the company's retirement fund. Sources inside the company also told the Telegraph that Vertu has unpaid debts with suppliers such as Qualcomm and Microsoft, and bills from waste management, pest control, and other property services.

From a New York Times report: A lone gunman opened fire on Republican members of the congressional baseball team at a practice field in a Washington suburb Wednesday, using a rifle to shower the field with bullets that struck five people, including Steve Scalise, the majority whip of the House of Representatives. Two members of Mr. Scalise's protective police detail were wounded as they exchanged gunfire with the shooter in what other lawmakers described as a chaotic, terror-filled ten minutes that turned the baseball practice into an early-morning nightmare. Police said a total of five people were shot, two critically. Standing at second base, Mr. Scalise was struck, in the hip, according to witnesses, and collapsed as the shots rang out, one after another, from behind a chain-link fence near the third-base dugout. Witnesses said Mr. Scalise, of Louisiana, "army crawled" his way toward taller grass as the shooting continued. Alternative source: NBC News, CNN, BBC, NPR, WashingtonPost, and WSJ.

Update: 06/14 15:40 GMT: In remarks at the White House, President Trump said the Alexandria shooting suspect has died from injuries.