The Courts

Florida's Whistleblower Covid-19 Data Manager Arrested Today (tampabay.com) 121

The state of Florida's former Covid-19 data manager was arrested today.

After her firing in May of 2020, Rebekah Jones had become a critic of the state's publicly-available information, even setting up her own online dashboard of Covid-19 case data. The state suspected her of being the person who'd illegally accessed the state's emergency alert health system in December to urge Health Department employees to speak up about the coronavirus, and state police obtained a warrant for a raid on her home during which they'd seized her computers and cellphones.

Jones later called the raid a "sham" to retaliate against her for not altering the state's COVID-19 data. This weekend on Twitter, Jones emphasized that the police found zero evidence during their raid to connect her to that message. She also argues that the newer allegation "was issued the day after a Tallahassee judge told police that if they're not investigating a crime, they had to return my equipment."

During that raid "police did find documents I received/downloaded from sources in the state, or something of that nature..." Jones posted Saturday. "[I]t isn't clear at this point what exactly they're saying I had that I shouldn't have had, but an agent confirmed it has nothing to do with the subject of the warrant."

The Tampa Bay Times reports: Jones announced Saturday on Twitter that she learned of the warrant and plans to turn herself in on Sunday. The Florida Department of Law Enforcement confirmed there is a warrant for Jones' arrest but said it cannot disclose what charges she faces until she is in custody.

Agency spokesman Gretl Plessinger said in an email to the Tampa Bay Times that "agents have been working with her attorney to have her turn herself in..."

Jones said she and her attorney were not told what she's being prosecuted for, just that she faces one criminal charge...

"The agent told my lawyer there would be only one charge," Jones tweeted on Saturday, "but emphasized that speaking out or going to the media may result in police 'stacking' additional charges."

UPDATE (1/18/2021): Monday in court prosecutors asked that Jones be banned from the internet, and be required to wear a GPS monitor — but a judge rejected the request (according to a local news report cited by the Orlando Sentinel). The warrant alleges that on Nov. 10, Jones downloaded a file equivalent to between 600 and 700 sheets of paper, containing contact information for about 19,182 Floridians. The file contained names, organizations, titles, home counties as well as personal phone numbers and emails, the warrant states.

On her Twitter account, Jones said the charge was retaliation for her criticisms of the state's COVID-19 response and claimed the charge had nothing to do with the original search warrant at her home last month...

The agency said the message was sent from an IP address that matched Jones' address, according to the warrant. Agents seized a desktop computer from Jones' home during the search, and a forensic analysis revealed she downloaded the file containing the information, the warrant reads.

The charge is a third-degree felony.

Government

Joe Biden Promotes 'Science Advisor' to US Cabinet-Level Position (apnews.com) 146

"President-elect Joe Biden announced Friday that he has chosen a pioneer in mapping the human genome — the so-called 'book of life' — to be his chief science adviser," reports the Associated Press, "and is elevating the top science job to a Cabinet position." Biden nominated Eric Lander, founding director of the Broad Institute of MIT and Harvard, who was the lead author of the first paper announcing the details of the human genome, as director of Office of Science and Technology Policy and adviser on science. He is the first life scientist to have that job. His predecessor is a meteorologist.

Saying "science will always be at the forefront of my administration," Biden said he is boosting the science advisor post to Cabinet level, a first in White House history.... "Elevating (the science adviser) role to member in the President's Cabinet clearly signals the administration's intent to involve scientific expertise in every policy discussion," said Sudip Parikh, chief executive officer of the American Association for the Advancement of Science, the world's largest general scientific society.

Twitter

US President-Elect Biden Starts New Twitter Account, Criticizes Policy on POTUS Account (bloomberg.com) 237

"This will be the account for my official duties as President," tweeted U.S. president-elect Joe Biden on Thursday — but from a new account at @PresElectBiden (which will transition to @POTUS after Wednesday's inauguration).

But Bloomberg reports Biden is still "clashing with the social media company over its decision to deny the incoming administration millions of existing White House followers." Biden's transition opened @PresElectBiden in order to start building a following for one of the official accounts the new president will inherit at noon on Jan. 20: @POTUS. In a change in practice from 2017, when President Donald Trump entered office, Twitter Inc. plans to reset both the @POTUS and @WhiteHouse official accounts to zero followers for Biden. The two accounts currently have a massive audience — nearly 60 million followers combined, though there is overlap.

Trump got a head start in 2017 when he inherited about 12 million followers of @POTUS from President Barack Obama's tenure, plus millions of followers from other official accounts. Though Trump used his personal account, @realDonaldTrump, as his primary social media mouthpiece throughout his presidency, Biden's aides think it's unfair Twitter isn't handing over followers along with the official accounts...

Twitter said it is too technically difficult to copy or roll over the millions of followers from the Trump White House accounts to Biden's official accounts. But two transition officials privately expressed skepticism, pointing to other social media platforms' handling of the change in administration. Both Facebook Inc. and its subsidiary Instagram will duplicate the millions of followers currently following the Trump White House accounts to follow new Biden White House accounts. "They are advantaging President Trump's first days of the administration over ours," Rob Flaherty, the transition's digital director who will be director of digital strategy in the Biden White House, said of Twitter. "If we don't end the day with the 12 million followers that Donald Trump inherited from Barack Obama, then they have given us less than they gave Donald Trump, and that is a failure."

Electronic Frontier Foundation

EFF, Cory Doctorow Warn About the Dangers of De-Platforming and Censorship (eff.org) 231

Last week Cory Doctorow shared his own answer for what Apple and Google should've done about Parler: They should remove it, and tell users, "We removed Parler because we think it is a politically odious attempt to foment violence. Our judgment is subjective and may be wielded against others in future. If you don't like our judgment, you shouldn't use our app store."

I'm 100% OK with that: first, because it is honest; and second, because it invites the question, "How do we switch app stores?"

Doctorow warns that "vital sectors of the digital economy became as concentrated as they are due to four decades of shameful, bipartisan neglect of antitrust law."

And now Slashdot reader esm88 notes that "The EFF has made a statement raising concerns over tech giants control over the internet and who gets to decide which speech is allowed" (authored by legal director Corynne McSherry, strategy director Danny O'Brien, and Jillian C. York, EFF director for international freedom of expression): Whatever you think of Parler, these decisions should give you pause. Private companies have strong legal rights under U.S. law to refuse to host or support speech they don't like. But that refusal carries different risks when a group of companies comes together to ensure that forums for speech or speakers are effectively taken offline altogether... Amazon's decision highlights core questions of our time: Who should decide what is acceptable speech, and to what degree should companies at the infrastructure layer play a role in censorship? At EFF, we think the answer is both simple and challenging: wherever possible, users should decide for themselves, and companies at the infrastructure layer should stay well out of it....

The core problem remains: regardless of whether we agree with an individual decision, these decisions overall have not and will not be made democratically and in line with the requirements of transparency and due process. Instead they are made by a handful of individuals, in a handful of companies, the most distanced and least visible to the most Internet users. Whether you agree with those decisions or not, you will not be a part of them, nor be privy to their considerations. And unless we dismantle the increasingly centralized chokepoints in our global digital infrastructure, we can anticipate an escalating political battle between political factions and nation states to seize control of their powers.

On Friday Bill Ottman, founder and CEO of the right-leaning blockchain-based social network Minds (which includes a Slashdot discussion area), posted that in order to remain in the Google Play store, "We had to remove search, discovery, and comments..." We aren't happy and will be working towards something better. What is fascinating is how Signal and Telegram are navigating this and in my opinion they are still there because they are encrypted messengers without much "public" content. Obviously controversial speech is happening there too...

We will be releasing a full report on our plan for fully censorship-resistant infrastructure.

Ottman also advises users downloading apps from Apple's store to "leave if you're smart."
Government

FAA Approves Fully Automated Commercial Drone Flights (go.com) 52

A Massachusetts company has been granted approval to operate commercial drone flights without a person directing the machine and keeping it in sight. It's the first time that the Federal Aviation Administration has allowed fully automated commercial drone flights. ABC News reports: American Robotics Inc. touted the advantage of its machines as being able to operate continuously without "expensive human labor." The Marlborough, Massachusetts, company said Friday it has tested fully automated drones for four years. CEO and co-founder Reese Mozer said there could be a $100 billion market in providing drone services to industries such as energy and agriculture, but that FAA safety requirements have restricted their use.

The company said its Scout drones have technology to stay a safe distance from other aircraft. They are housed in base stations that allow for autonomous charging and to process and transmit the data they collect from aerial surveys. According to documents posted Thursday by the FAA, the drones, which fly along planned routes, will be limited to altitudes below 400 feet (122 meters) in rural areas. The FAA will allow them to have a maximum takeoff weight of 20 pounds (nine kilograms).

Books

Amazon.com and 'Big Five' Publishers Accused of eBook Price-Fixing (theguardian.com) 50

Amazon.com and the "Big Five" publishers -- Penguin Random House, Hachette, HarperCollins, Macmillan and Simon & Schuster -- have been accused of colluding to fix ebook prices, in a class action filed by the law firm that successfully sued Apple and the Big Five on the same charge 10 years ago. The Guardian reports: The lawsuit, filed in district court in New York on Thursday by Seattle firm Hagens Berman, on behalf of consumers in several US states, names the retail giant as the sole defendant but labels the publishers "co-conspirators." It alleges Amazon and the publishers use a clause known as "Most Favored Nations" (MFN) to keep ebook prices artificially high, by agreeing to price restraints that force consumers to pay more for ebooks purchased on retail platforms that are not Amazon.com. The lawsuit claims that almost 90% of all ebooks sold in the US are sold on Amazon, in addition to over 50% of all print books. The suit alleges that ebook prices dropped in 2013 and 2014 after Apple and major publishers were successfully sued for conspiring to set ebook prices, but rose again after Amazon renegotiated their contracts in 2015.

"In violation of Section 1 of the Sherman Antitrust Act, Defendant and the Big Five Co-conspirators agreed to various anti-competitive MFNs and anti-competitive provisions that functioned the same as MFNs," the complaint states. "Amazon's agreement with its Co-conspirators is an unreasonable restraint of trade that prevents competitive pricing and causes Plaintiffs and other consumers to overpay when they purchase ebooks from the Big Five through an ebook retailer that competes with Amazon. That harm persists and will not abate unless Amazon and the Big Five are stopped." The suit seeks compensation for consumers who purchased ebooks through competitors, damages and injunctive relief that would require Amazon and the publishers to "stop enforcing anti-competitive price restraints."

Businesses

Apple Fails To Overturn VirnetX Patent Verdict, Could Owe Over $1.1 Billion (reuters.com) 55

A federal judge denied Apple's bid to set aside or reduce a $502.8 million patent infringement verdict favoring VirnetX, and awarded interest and royalties that could boost Apple's total payout in two lawsuits above $1.1 billion. From a report: In a decision issued on Friday, U.S. District Judge Robert Schroeder in Tyler, Texas rejected Apple's request for a new trial and several other claims. These included that VirnetX's award should not exceed $113.7 million, and that jurors should have been told the U.S. Patent and Trademark Office had deemed VirnetX's claims "unpatentable." Jurors in October found that Apple infringed two VirnetX patents related to secure networks, known as virtual private networks, to which owners of various iPhones and iPads may connect.
China

MIT Professor Charged With Hiding Work For China (apnews.com) 83

A Massachusetts Institute of Technology professor was charged Thursday with hiding work he did for the Chinese government while he was also collecting U.S. dollars for his nanotechnology research. The Associate Press reports: Gang Chen, 56, was arrested by federal agents at his home in Cambridge on charges including wire fraud, officials said. While working for MIT, Chen entered into undisclosed contracts and held appointments with Chinese entities, including acting as an "overseas expert" for the Chinese government at the request of the People's Republic of China Consulate Office in New York, authorities said. Many of those roles were "expressly intended to further the PRC's scientific and technological goals," authorities said in court documents.

Chen did not disclose his connections to China, as is required on federal grant applications, authorities said. He and his research group collected about $29 million in foreign dollars, including millions from a Chinese government funded university funded, while getting $19 million in grants from U.S federal agencies for his work at MIT since 2013, authorities said. "It is not illegal to collaborate with foreign researchers. It is illegal to lie about it," Massachusetts U.S. Attorney Andrew Lelling told reporters. Chen's attorney said the professor "loves the United States and looks forward to vigorously defending these allegations."
MIT said it is "deeply distressed" by Chen's arrest. "MIT believes the integrity of research is a fundamental responsibility, and we take seriously concerns about improper influence in U.S. research. Prof. Chen is a long-serving and highly respected member of the research community, which makes the government's allegations against him all the more distressing," the school said in a statement.
The Almighty Buck

Andrew Yang Kicks Off NYC Mayoral Run With Basic Income Promise (aljazeera.com) 155

An anonymous reader quotes a report from Aljazeera: Tech entrepreneur Andrew Yang, a former presidential contender, officially declared his run for New York City mayor. In a campaign video released late Wednesday on Twitter, Yang put forth an agenda that included a guaranteed minimum income, bringing universal high-speed Internet, starting a "people's bank" and reopening New York City "intelligently" from the pandemic. "I moved to New York City 25 years ago," he said in the video. "I came of age, fell in love, and became a father here. Seeing our city in so much pain breaks my heart." His agenda includes a focus on New York City's nightlife. On his campaign website, Yang pledges to make permanent outdoor dining, "to-go cocktails" and other temporary measures put in place during the pandemic. He also says he wants to attract so-called TikTok hype houses, where social-media influencers live together in big mansions and shoot videos together.

Yang's basic income program would start by providing $2,000 a year to half a million New Yorkers in extreme poverty. Participants would receive the cash through monthly transfers to a bank account opened in their name at a newly-created "People's Bank." His most detailed policy focuses on reviving the city's small businesses. He pledged to open 15,000 small businesses by 2022 and also offered a bevy of unconventional ideas, including buying heaters in bulk and then selling them to restaurants that are serving customers in the frigid outdoors as indoor dining remains shut. He also suggested the city make an investment in Cinch Market, a Brooklyn startup that brings together small businesses on one online platform, whose tagline is "Shop Brooklyn Not Bezo$." Yang, 46, whose two kids attend public school in the city, also said he wanted to subsidize broadband for schools, expand the city's universal preschool program, and reform the school system's admissions process. "There will be no recovery without schools being open and teaching children safely every day," he said.

Security

Amazon's Ring Neighbors App Exposed Users' Precise Locations and Home Addresses (techcrunch.com) 19

A security flaw in Ring's Neighbors app was exposing the precise locations and home addresses of users who had posted to the app. From a report: Ring, the video doorbell and home security startup acquired by Amazon for $1 billion, launched Neighbors in 2018 as a breakaway feature in its own standalone app. Neighbors is one of several neighborhood watch apps, like Nextdoor and Citizen, that lets users anonymously alert nearby residents to crime and public-safety issues. While users' posts are public, the app doesn't display names or precise locations -- though most include video taken by Ring doorbells and security cameras. The bug made it possible to retrieve the location data on users who posted to the app, including those who are reporting crimes. But the exposed data wasn't visible to anyone using the app. Rather, the bug was retrieving hidden data, including the user's latitude and longitude and their home address, from Ring's servers. Another problem was that every post was tied to a unique number generated by the server that incremented by one each time a user created a new post. Although the number was hidden from view to the app user, the sequential post number made it easy to enumerate the location data from previous posts -- even from users who aren't geographically nearby.
AI

FTC Settlement With Ever Orders Data and AIs Deleted After Facial Recognition Pivot 20

The maker of a defunct cloud photo storage app that pivoted to selling facial recognition services has been ordered to delete user data and any algorithms trained on it, under the terms of an FTC settlement. TechCrunch reports: The regulator investigated complaints the Ever app -- which gained earlier notoriety for using dark patterns to spam users' contacts -- had applied facial recognition to users' photographs without properly informing them what it was doing with their selfies. Under the proposed settlement, Ever must delete photos and videos of users who deactivated their accounts and also delete all face embeddings (i.e. data related to facial features which can be used for facial recognition purposes) that it derived from photos of users who did not give express consent to such a use. Moreover, it must delete any facial recognition models or algorithms developed with users' photos or videos.

This full suite of deletion requirements -- not just data but anything derived from it and trained off of it -- is causing great excitement in legal and tech policy circles, with experts suggesting it could have implications for other facial recognition software trained on data that wasn't lawfully processed. Or, to put it another way, tech giants that surreptitiously harvest data to train AIs could find their algorithms in hot water with the US regulator.
Bitcoin

ECB's Christine Lagarde Blasts Bitcoin's Role In Facilitating Money Laundering (bloomberg.com) 126

An anonymous reader quotes a report from Bloomberg: European Central Bank President Christine Lagarde took aim at Bitcoin's role in facilitating criminal activity, saying the cryptocurrency has been enabling "funny business." "For those who had assumed that it might turn into a currency -- terribly sorry, but this is an asset and it's a highly speculative asset which has conducted some funny business and some interesting and totally reprehensible money-laundering activity," Lagarde said in an online event organized by Reuters.

The remarks, made in a conversation largely focused on the euro-area's economic outlook, show top policymakers are taking notice as a speculative fever sweeps cryptocurrency markets. Bitcoin prices have more than doubled since November and topped a record $41,000 earlier this month. Concerns over money laundering and the ability of financial firms to know the identities of their clients have been at the forefront of the cryptocurrency debate. While critics say that instruments like Bitcoin make the illicit transfer of funds easier, crypto advocates say the network of digital ledgers known as the blockchain allows money to be traced more easily than cash and can actually help law enforcement.

Piracy

Pirate Bay Founder Thinks Parler's Inability To Stay Online Is 'Embarrassing' (vice.com) 307

An anonymous reader quotes a report from Motherboard: As one of the original co-founders of The Pirate Bay, Peter Sunde Kolmisoppi knows a little something about keeping controversial services online. Kolmisoppi and his colleagues spent decades battling a global coalition of corporations, governments, and law enforcement agencies intent on wiping the file sharing website from the face of the internet. Unsuccessfully. Kolmisoppi took to Twitter this week to share some thoughts on Parler's recent deplatforming for failing to seriously police death threats and illegal content before and after the fatal Capitol riots.

"The Pirate Bay, the most censored website in the world, started by kids, run by people with problems with alcohol, drugs and money, still is up after almost two decades," Kolmisoppi said. "Parlor and gab etc have all the money around but no skills or mindset. Embarrassing." [...] Platforming white supremacy and hate speech is a tougher proposition than serving users pirated copies of the Prince discography. But Kolmisoppi was quick to laugh at the fact that despite being backed by billionaires and parts of the US government, Parler didn't seem remotely prepared for the justified firestorm it found itself at the center of. "The most ironic thing is that The Pirate Bay's enemies include not just the US government but also many European and the Russian one," he said. "Compared to gab/parlor which is supported by the current president of the US and probably liked by the Russian one too."

"In all honesty, the reason we did The Pirate Bay was to bring freedom and take back control from a centralised system," Kolmisoppi said. "The reason that Gab et al will fail is because they're just whining bitches that have only one ideology: egotism. Sharing is caring y'all." In more recent years, Kolmoisoppi has moved on to fund Njalla, a privacy-centric domain name registration service. One he says was already asked to host Parler, and refused. "Of course we wouldn't," Kolmisoppi said. "We're pro human rights, which includes the right to not be killed by extreme right wing terrorists."

Government

House Votes To Impeach President Trump a Historic Second Time (nytimes.com) 557

A House majority, including several Republicans, on Wednesday voted to impeach President Trump for "incitement of insurrection." The New York Times reports: The House had enough votes on Wednesday to impeach President Trump for inciting a violent insurrection against the United States government, as more than a half-dozen members of the president's party joined Democrats to charge him with high crimes and misdemeanors for an unprecedented second time. Reconvening under the threat of continued violence and the protection of thousands of National Guard troops, the House was determined to hold Mr. Trump to account just one week before he was to leave office. At issue was his role in encouraging a mob that attacked the Capitol one week ago while Congress met to affirm President-elect Joseph R. Biden Jr.'s victory, forcing lawmakers to flee for their lives in a deadly rampage.

The House put forward and was on the brink of adopting a single article of impeachment, charging Mr. Trump with "inciting violence against the government of the United States" and requesting his immediate removal from office and disqualification from ever holding one again. [...] The vote, which was still underway, set the stage for the second Senate trial of Mr. Trump in a year, though senators appeared unlikely to convene to sit in judgment before Jan. 20, when Mr. Biden will take the oath of office. The last proceeding, over Mr. Trump's attempts to pressure Ukraine to smear Mr. Biden, was a partisan affair. [...]

This time, Senator Mitch McConnell of Kentucky, the Republican leader, was said to support the effort as a means of purging his party of Mr. Trump, setting up a political and constitutional showdown that could shape the course of American politics when the nation remains dangerously divided. [McConnell said he would not agree to use emergency powers to bring the Senate back into session for a trial before Jan. 19.] The House's vote was historic. Only two other presidents have been impeached; none has been impeached twice, by such a large bipartisan margin, or so close to leaving office.

Government

Parler Users Breached Deep Inside US Capitol Building, GPS Data Shows (gizmodo.com) 271

An anonymous reader quotes a report from Gizmodo: At least several users of the far-right social network Parler appear to be among the horde of rioters that managed to penetrate deep inside the U.S. Capitol building and into areas normally restricted to the public, according to GPS metadata linked to videos posted to the platform the day of the insurrection in Washington. The data, obtained by a computer hacker through legal means ahead of Parler's shutdown on Monday, offers a bird's eye view of its users swarming the Capitol grounds after receiving encouragement from President Trump -- and during a violent breach that sent lawmakers and Capitol Hill visitors scrambling amid gunshots and calls for their death. GPS coordinates taken from 618 Parler videos analyzed by Gizmodo has already been sought after by FBI as part of a sweeping nationwide search for potential suspects, at least 20 of whom are already in custody.

Gizmodo has mapped nearly 70,000 geo-located Parler posts and on Tuesday isolated hundreds published on January 6 near the Capitol where a mob of pro-Trump supporters had hoped to overturn a democratic election and keep their president in power. The data shows Parler users posting all throughout the day, documenting their march from the National Mall to Capitol Hill where the violent insurrection ensued. The precise locations of Parler users inside the building can be difficult to place. The coordinates do not reveal which floors they are on, for instance. Moreover, the data only includes Parler users who posted videos taken on January 6. And the coordinates themselves are only accurate up to an approximate distance of 12 yards (11 meters).

The red dot just south of the Capitol Rotunda's center on the map above is linked to a video Gizmodo verified that shows rioters in red MAGA hats shouting obscenities about House Speaker Nancy Pelosi, whose office is a short walk to the west. But other dots nearby could indicate videos captured in adjacent offices, stairwells, or hallways leading toward the House and Senate chambers. A second video successfully linked to the Parler data belongs to a rioter who filmed a mob in the Rotunda chanting, "Whose House? Our House?" (while facing the Senate side of the building). Other coordinates pulled from Parler point to users roaming the north side of the building near the Senate chamber, either near leadership offices or the press gallery, depending on which floor they were on. Other location data from outside the Capitol follows the precise route the crowd took from the National Mall shortly after a speech by President Trump...

Google

Google Sued by YouTube Rival Over Search Rankings (wsj.com) 71

Video-sharing site Rumble accused Google in a lawsuit of abusing the power of its search engine and mobile operating system to boost its YouTube video service over rivals, the latest allegation of anticompetitive conduct against the Alphabet unit. From a report: Toronto-based Rumble, which has become popular among conservative pundits, on Monday filed an antitrust suit in federal court in California arguing that Google is "unfairly rigging its search algorithms" to place YouTube above Rumble in its search results. Rumble said Google's behavior cost it significant numbers of viewers and advertising dollars. The lawsuit also argues that Google's deals to pre-install a YouTube app on mobile devices running Google's Android operating system have unfairly deprived Rumble of viewers. "Google, through its search engine, was able to wrongfully divert massive traffic to YouTube, depriving Rumble of the additional traffic, users, uploads, brand awareness and revenue it would have otherwise received," the lawsuit states. "We will defend ourselves against these baseless claims," a Google spokeswoman said.
Security

Ubiquiti Tells Customers To Change Passwords After Security Breach (zdnet.com) 25

An anonymous reader quotes a report from ZDNet: Networking equipment and IoT device vendor Ubiquiti Networks has sent out today notification emails to its customers informing them of a recent security breach. "We recently became aware of unauthorized access to certain of our information technology systems hosted by a third party cloud provider," Ubiquiti said in emails today. The servers stored information pertaining to user profiles for account.ui.com, a web portal that Ubiquiti makes available to customers who bought one of its products. The site is used to manage devices from a remote location and as a help and support portal.

According to Ubiquiti, the intruder accessed servers that stored data on UI.com users, such as names, email addresses, and salted and hashed passwords. Home addresses and phone numbers may have also been exposed, but only if users decided to configure this information into the portal. How many Ubiquiti users are impacted and how the data breach occurred remains a mystery. It is currently unclear if the "unauthorized access" took place when a security researcher found the exposed data or was due to a malicious threat actor. Despite the bad news to its customers, Ubiquiti said that it had not seen any unauthorized access to customer accounts as a result of this incident. The company is now asking all users who receive the email to change their account passwords and turn on two-factor authentication.

Social Networks

Scraped Parler Data Is a Metadata Gold Mine (techcrunch.com) 333

An anonymous reader quotes a report from TechCrunch: Embattled social media platform Parler is offline after Apple, Google and Amazon pulled the plug on the site after the violent riot at the U.S. Capitol last week that left five people dead. But while the site is gone (for now), millions of posts published to the site since the riot are not. A lone hacker scraped millions of posts, videos and photos published to the site after the riot but before the site went offline on Monday, preserving a huge trove of potential evidence for law enforcement investigating the attempted insurrection by many who allegedly used the platform to plan and coordinate the breach of the Capitol.

The hacker and internet archivist, who goes by the online handle @donk_enby, scraped the social network and uploaded copies to the Internet Archive, which hosts old and historical versions of web pages. In a tweet, @donk_enby said she scraped data from Parler that included deleted and private posts, and the videos contained "all associated metadata." The scraped videos from Parler appear to also include the precise location data of where the videos were taken. That metadata could be a gold mine of evidence for authorities investigating the Capitol riot, which may tie some rioters to their Parler accounts or help police unmask rioters based on their location data.

Security

Hacker Locks Internet-Connected Chastity Cage, Demands Ransom (vice.com) 139

A hacker took control of people's internet-connected chastity cages and demanded a ransom to be paid in Bitcoin to unlock it. From a report: "Your cock is mine now," the hacker told one of the victims, according to a screenshot of the conversation obtained by a security researcher that goes by the name Smelly and is the founder of vx-underground, a website that collects malware samples. In October of last year, security researchers found that the manufacturer of an Internet of Things chastity cage -- a sex toy that users put around their penis to prevent erections that is used in the BDSM community and can be unlocked remotely -- had left an API exposed, giving malicious hackers a chance to take control of the devices. That's exactly what happened, according to a security researcher who obtained screenshots of conversations between the hacker and several victims, and according to victims interviewed by Motherboard. A victim who asked to be identified only as Robert said that he received a message from a hacker demanding a payment of 0.02 Bitcoin (around $750 today) to unlock the device. He realized his cage was definitely "locked," and he "could not gain access to it."

Slashdot Top Deals