Security

Security Researcher and Alleged Spam Operator To Square Off In Court In Ugly Lawsuit (bleepingcomputer.com) 56

An anonymous reader writes: River City Media, the company accused of running a huge spam operation, has filed a lawsuit against the security researcher and the journalist who exposed their activities. In a ludicrous lawsuit complaint, the company claims the security researcher didn't just stumble upon its unprotected Rsync server, but "perpetrated a coordinated, months-long cyberattack," during which it skirted firewall rules to access its server, used a VPN to disguise his identity, deleted critical files, and published his findings to make a name for himself as an elite security researcher. The company claims the researcher accessed Dropbox and HipChat logs, and even its PayPal account, from where it used funds to purchase various domains. The only evidence the company has is that the person who purchased the domains used a ProtonMail email, just like the researcher, who also uses a ProtonMail email. Remind you, this is the same security researcher, Chris Vickery, who discovered a Reuters database of supposed terrorism suspects, national voter databases for various U.S. states and Mexico, and various other companies.
Intel

Intel Patches Remote Execution Hole That's Been Hidden In Its Chips Since 2008 (theregister.co.uk) 164

Chris Williams reports via The Register: Intel processor chipsets have, for roughly the past nine years, harbored a security flaw that can be exploited to remotely control and infect vulnerable systems with virtually undetectable spyware and other malicious code. Specifically, the bug is in Intel's Active Management Technology (AMT), Standard Manageability (ISM) and Small Business Technology (SBT) firmware versions 6 to 11.6. According to Chipzilla, the security hole allows "an unprivileged attacker to gain control of the manageability features provided by these products." That means hackers exploiting the flaw can silently snoop on a vulnerable machine's users, make changes to files and read them, install rootkits and other malware, and so on. This is possible across the network, or with local access. These management features have been available in various Intel chipsets for years, starting with the Nehalem Core i7 in 2008, all the way up to Kaby Lake Core parts in 2017. According to Intel today, this critical security vulnerability, labeled CVE-2017-5689, was found and reported in March by Maksim Malyutin at Embedi. To get the patch to close the hole, you'll have to pester your machine's manufacturer for a firmware update, or try the mitigations here. These updates are hoped to arrive within the next few weeks.
Power

India Aims To Make Every Car Electric By 2030 In Bid To Tackle Pollution (independent.co.uk) 118

India's energy minister has unveiled plans for every car sold in the country to be powered by electricity by the year 2030. "The move is intended to lower the cost of importing fuel and lower costs for running vehicles," reports The Independent. From the report: âoeWe are going to introduce electric vehicles in a very big way," coal and mines minister Piyush Goyal said at the Confederation of Indian Industry Annual Session 2017 in New Delhi. "We are going to make electric vehicles self-sufficient... The idea is that by 2030, not a single petrol or diesel car should be sold in the country." Mr Goyal said the electric car industry would need between two and three years of government assistance, but added that he expected the production of the vehicles to be "driven by demand and not subsidy" after that. "The cost of electric vehicles will start to pay for itself for consumers," he said according to the International Business Times. "We would love to see the electric vehicle industry run on its own," he added. An investigation by Greenpeace this year found that as many as 2.3 million deaths occur every year due to air pollution in the country. The report, entitled "Airpocalypse," claimed air pollution had become a "public health and economic crisis" for Indians. It said the number of deaths caused by air pollution was only "a fraction less" than the number of deaths from tobacco use, adding that 3 percent of the country's Gross Domestic Product (GDP) was lost to the levels of toxic smog.
Crime

Taser Will Use Police Body Camera Videos 'To Anticipate Criminal Activity' (theintercept.com) 76

Presto Vivace quotes a report from The Intercept: With an estimated one-third of departments using body cameras, police officers have been generating millions of hours of video footage. Taser stores terabytes of such video on Evidence.com, in private servers to which police agencies must continuously subscribe for a monthly fee. Data from these recordings is rarely analyzed for investigative purposes, though, and Taser -- which recently rebranded itself as a technology company and renamed itself "Axon" -- is hoping to change that. Taser has started to get into the business of making sense of its enormous archive of video footage by building an in-house "AI team." In February, the company acquired two computer vision startups, Dextro and Fossil Group Inc. Taser says the companies will allow agencies to automatically redact faces to protect privacy, extract important information, and detect emotions and objects -- all without human intervention. This will free officers from the grunt work of manually writing reports and tagging videos, a Taser spokesperson wrote in an email. "Our prediction for the next few years is that the process of doing paperwork by hand will begin to disappear from the world of law enforcement, along with many other tedious manual tasks." Analytics will also allow departments to observe historical patterns in behavior for officer training, the spokesperson added. "Police departments are now sitting on a vast trove of body-worn footage that gives them insight for the first time into which interactions with the public have been positive versus negative, and how individuals' actions led to it." But looking to the past is just the beginning: Taser is betting that its artificial intelligence tools might be useful not just to determine what happened, but to anticipate what might happen in the future.
Privacy

Facebook Lets Advertisers Target Insecure Teens, Says Report (cnet.com) 118

An anonymous reader shares a report: Leaked documents from Facebook's team in Australia allegedly show the social giant's ability to help advertisers target teens who feel "worthless." The documents, first revealed by The Australian, say Facebook can spot when teens "need a confidence boost." The documents reportedly get even more specific, saying Facebook's algorithm can pinpoint when teens feel "useless," "stressed," "failure," "silly," "stupid," "worthless" and "defeated." Using Facebook's tools as well as image recognition, advertisers would be able to find teens in some of their lowest moments -- and then target ads to them. The leaked documents also detailed how advertisers could use Facebook's algorithms to find teens who were interested in "working out and losing weight" and promote health products, according to The Australian. Facebook's team in Australia was reportedly looking to capitalize on 6.4 million teens who use the social network in their region.
Businesses

US Appeals Court Won't Rehear 'Net Neutrality' Challenge (reuters.com) 32

A federal appeals court on Monday declined to rehear a challenge to the Obama administration's landmark "net neutrality" rules requiring internet providers to guarantee equal access to all websites. From a report: The decision by the full appeals court in Washington not to reconsider a three-judge panel's decision that upheld the ruling comes days after Federal Communications Commission Chairman Ajit Pai proposed to undo the 2015 net neutrality that reclassified internet providers like public utilities. The 2015 order bars internet providers from blocking, throttling or giving "fast lanes" to some websites. Pai has proposed reversing the reclassification and scrapping internet conduct standards, and has asked for comment on whether the FCC can or should retain any of the rules barring blocking, throttling or "fast lanes." Judge Sri Srinivasan said in a written opinion reviewing the decision "would be particularly unwarranted at this point in light of the uncertainty surrounding the fate of the FCC's order."
Businesses

Trump is Launching a New Tech Group To 'Transform and Modernize' the US Govt (recode.net) 192

President Donald Trump announced on Monday he has signed an executive order creating a new technology council to "transfer and modernize" the U.S. government's IT systems. From a report: The gathering is part of a new effort, called the American Technology Council, commissioned by Trump in an executive order signed this morning. The effort seeks to bring leading government officials together with Silicon Valley's top minds in order to "transform and modernize" the aging federal bureaucracy "and how it uses and delivers information." Trump isn't the first sitting U.S. president to look to Silicon Valley in an attempt to bring government into the digital age. His predecessor, former President Barack Obama, similarly launched efforts like the U.S. Digital Service, which the administration billed at the time as a "startup at the White House" that sought to pair tech experts with federal agencies that needed help. Over 20 technology chief executives will attend meetings at the White House in early June to talk about improving government information technology, the report adds.
DRM

DRM Will Be Gone By 2025, Predicts Cory Doctorow (theregister.co.uk) 191

An anonymous reader writes: It's been two years since Cory Doctorow joined the EFF's campaign to eliminate DRM within 8 years -- and he still believes it'll happen. "Farmers and the Digital Right To Repair Coalition have done brilliantly and have a message which is extremely resonant with the political right as well as the political left." And now even the entertainment industry seems to oppose extending the DMCA to tractors. "The entertainment industry feels very proprietary towards laws that protect DRM. They really feel that they lobbied for and bought these laws in order to protect the business model they envisioned. For these latecomer upstarts to turn up and stretch and distort these laws out of proportion has really exposed one of the natural cracks in copyright altogether."
Doctorow also says that "If there's anything good that might come of Brexit, it's that the UK will renegotiate and reevaluate its relationship to the Organisation for Economic Co-operation and Development and other directives. The UK enjoys a really interesting market position if it wants to be the only nation in the region that makes, exports, and supports DRM-breaking tools."

Slashdot Top Deals