ノーマルビュー

Mandatory WhatsApp Privacy Policy Update Allows User Data To be Shared With Facebook

著者: msmash
2021年1月6日 23:00
WhatsApp's latest terms and privacy policy allows the popular messaging app to share a significant amount of user data with Facebook. From a report: WhatsApp users are today receiving an in-app notice informing them about the app's updated terms of service and privacy policy. The notice gives an overview of the main three updates, covering how WhatsApp processes user data, how businesses can use Facebook-hosted services to store and manage their WhatsApp chats, and how WhatsApp will soon partner with Facebook to offer deeper integrations across all of the parent company's products. The changes, which are set to take effect on February 8, 2021, are mandatory and users will not be able to continue using WhatsApp unless they accept the terms.

Read more of this story at Slashdot.

Hackers Target Cryptocurrency Users With New ElectroRAT Malware

著者: BeauHD
2021年1月6日 22:00
An anonymous reader quotes a report from ZDNet: Security firm Intezer Labs said it discovered a covert year-long malware operation where cybercriminals created fake cryptocurrency apps in order to trick users into installing a new strain of malware on their systems, with the obvious end goal of stealing victims' funds. The campaign was discovered last month in December 2020, but researchers said they believe the group began spreading their malware as early as January 8, 2020. Intezer Labs said the hackers relied on three cryptocurrency-related apps for their scheme. The fake apps were named Jamm, eTrade/Kintum, and DaoPoker, and were hosted on dedicated websites at jamm[.]to, kintum[.]io, and daopker[.]com, respectively. The first two apps claimed to provide a simple platform to trade cryptocurrency, while the third was a cryptocurrency poker app. All three apps came in versions for Windows, Mac, and Linux, and were built on top of Electron, an app-building framework. But Intezer researchers say the apps also came with a little surprise in the form of a new malware strain that was hidden inside, which the company's researchers named ElectroRAT. Intezer researchers believe the malware was being used to collect cryptocurrency wallet keys and then drain victims' accounts. To spread the trojanized applications, Intezer says the hackers posted ads for the three apps and their websites on niche cryptocurrency forums, or they used social media accounts. Because of a quirk in the malware's design, which retrieved the address of its command and control server from a Pastebin URL, Intezer believes this operation infected around 6,500 users -- the total number of times the Pastebin URLs were accessed.

Read more of this story at Slashdot.

Verizon Indefinitely Delays 3G Network Shutdown

著者: BeauHD
2021年1月6日 19:00
Verizon has backtracked on its plan to turn off its 3G network by the end of 2020. Light Reading reports: In response to questions from Light Reading, Verizon spokesperson Kevin King said "our 3G network is operational and we don't have a plan to shut it down at this time. We'll work with customers to move them to newer technology." That's a decided change from Verizon's plans from roughly a year ago. In July 2019, Verizon spokesperson Howie Waterman confirmed to Light Reading that the operator had delayed the shuttering of its 3G network from the end of 2019 to the end of 2020. He said the action would give impacted customers "an extra year to decide what they want to do." Verizon's decision to keep its 3G network up and running means the service provider will continue to operate three separate wireless network technologies -- 3G, 4G and 5G -- for the foreseeable future. As for the other carriers, AT&T plans to shutter its own 3G network in "early" 2022 and T-Mobile has said it will shut down its 3G network "over the next several years" but "we haven't shared timing."

Read more of this story at Slashdot.

Telegram Feature Exposes Your Precise Address To Hackers

著者: BeauHD
2021年1月6日 16:00
Telegram has no plans to fix a vulnerability that makes it easy for hackers to find your precise location. The problem stems from a feature called People Nearby, which is disabled by default, but allows users who are geographically close to you to connect. Ars Technica reports: Independent researcher Ahmed Hassan, however, has shown how the feature can be abused to divulge exactly where you are. Using readily available software and a rooted Android device, he's able to spoof the location his device reports to Telegram servers. By using just three different locations and measuring the corresponding distance reported by People Nearby, he is able to pinpoint a user's precise location. Telegram lets users create local groups within a geographical area. Hassan said that scammers often spoof their location to crash such groups and then peddle fake bitcoin investments, hacking tools, stolen social security numbers, and other scams. Telegram lets users create local groups within a geographical area. Hassan said that scammers often spoof their location to crash such groups and then peddle fake bitcoin investments, hacking tools, stolen social security numbers, and other scams. A proof-of-concept video the researcher sent to Telegram showed how he could discern the address of a People Nearby user when he used a free GPS spoofing app to make his phone report just three different locations. He then drew a circle around each of the three locations with a radius of the distance reported by Telegram. The user's precise location was where all three intersected. In a blog post, Hassan included an email from Telegram in response to the report he had sent them. It noted that People Nearby isn't enabled by default and that "it's expected that determining the exact location is possible under certain conditions." People Nearby poses the biggest threat to people using Android devices, since they report a user's location with enough granularity to make Hassan's attack work. The recently released iOS 14, by contrast, allows users to divulge only a rough approximation of their location. People who use this feature aren't as exposed. Fixing the problem -- or at least making it much harder to exploit it -- wouldn't be hard from a technical perspective. Rounding locations to the nearest mile and adding some random bits generally suffices. When the Tinder app had a similar disclosure vulnerability, developers used this kind of technique to fix it.

Read more of this story at Slashdot.

Trump Auctions Arctic Refuge To Oil Drillers In Last Strike Against US Wilderness

著者: BeauHD
2021年1月6日 12:30
An anonymous reader quotes a report from The Guardian: In one of its last strikes against the American wilderness, Donald Trump's administration will on Wednesday auction off portions of the Arctic national wildlife refuge to oil drillers. The lease sales are the climax to one of the nation's highest-profile environmental battles. The lands on the northern coastal plain of Alaska are home to denning polar bears and migrating herds of Porcupine caribou that indigenous communities depend on and consider sacred. But the oil industry has long suspected that the ground beneath the plain holds billions of barrels of petroleum. Once the leases in the refuge, known as ANWR, are sold to energy companies, they would be difficult to claw back. The incoming president, Joe Biden, could, however, discourage development in the refuge by putting regulatory hurdles in the way of drillers. The refuge has become central to America's debate over how quickly to stop drilling for and burning fossil fuels as the climate crisis accelerates. Climate experts say there should be no new oil and gas extraction, as the world is already more than 1C hotter than pre-industrial times. Even if humans stopped using fossil fuels today, the planet would continue to heat. [...] On Monday, the Trump administration also dramatically expanded the area where the government can lease public land for oil drilling to the west of ANWR. The plan would allow drilling in 82% of the National Petroleum Reserve-Alaska, an area bigger than the state of West Virginia, according to environmental groups, though the Biden administration could reverse that decision more easily than it could hold off drilling in ANWR.

Read more of this story at Slashdot.

US: Hack of Federal Agencies 'Likely Russian In Origin'

著者: BeauHD
2021年1月6日 11:10
Top national security agencies in a rare joint statement Tuesday confirmed that Russia was likely responsible for a massive hack of U.S. government departments and corporations, rejecting President Donald Trump's claim that China might be to blame. The Associated Press reports: The statement represented the U.S. government's first formal attempt to assign responsibility for the breaches at multiple agencies and to assign a possible motive for the operation. It said the hacks appeared to be part of an "intelligence-gathering," suggesting the evidence so far pointed to a Russian spying effort rather than an attempt to damage or disrupt U.S. government operations. "This is a serious compromise that will require a sustained and dedicated effort to remediate," said the statement, distributed by a cyber working group comprised of the FBI and other investigative agencies. Russia has denied involvement in the hack.

Read more of this story at Slashdot.

GitHub Secures License To Operate In Iran

著者: BeauHD
2021年1月6日 10:30
Last July, GitHub prevented users in Iran and several other nations from accessing portions of the service due to U.S. sanction laws. Today, the world's largest host of source code announced that it has secured a license from the U.S. government to operate in Iran. It's also working to secure similar licenses for developers in Crimea and Syria as well. MSPoweruser reports: "Over the course of two years, we were able to demonstrate how developer use of GitHub advances human progress, international communication, and the enduring U.S. foreign policy of promoting free speech and the free flow of information. We are grateful to OFAC for the engagement which has led to this great result for developers. We are in the process of rolling back all restrictions on developers in Iran, and reinstating full access to affected accounts," wrote Nat Friedman, CEO of GitHub. GitHub is also working with the U.S. government to secure similar licenses for developers in Crimea and Syria as well.

Read more of this story at Slashdot.

Graphics Cards Are About To Get a Lot More Expensive, Asus Warns

著者: msmash
2021年1月6日 09:50
Ever since Nvidia's GeForce RTX 30-series and AMD's Radeon RX 6000-series graphics cards launched last fall, the overwhelming demand and tight supply, exacerbated by a cryptocurrency boom, has caused prices for all graphics cards to go nuts. Brace yourself: It looks like it's about to get even worse. From a report: In the Asus DIY PC Facebook group, Asus technical marketing manager Juan Jose Guerrero III warned that prices for the company's components will increase in the new year. "We have an announcement in regards to MSRP price changes that are effective in early 2021 for our award-winning series of graphic cards and motherboards," Guerrero wrote, though he warned that "additional models" may also wind up receiving price increases as well. "Our new MSRP reflects increases in cost for components. operating costs, and logistical activities plus a continuation of import tariffs. We worked closely with our supply and logistic partners to minimize price increases. ASUS greatly appreciates your continued business and support as we navigate through this time of unprecedented market change."

Read more of this story at Slashdot.

Dell's New Monitors Have a Dedicated Microsoft Teams Button

著者: BeauHD
2021年1月6日 09:30
Dell is launching three new monitors next month, and all of them come with a dedicated Microsoft Teams button. The Verge reports: Dell claims it has created the "world's first video conferencing monitors certified for Microsoft Teams," after Microsoft started certifying displays, webcams, and headsets last year. Three monitors will be available next month, all offering quick access to Microsoft Teams. The button will let Microsoft Teams users quickly launch the app to make and receive video calls. Hands-free commands will also be supported through Cortana and the built-in microphone. The Teams button is the main surprise with these displays, but Dell's trio of videoconferencing monitors also have some useful specs designed for an era where remote work and video calling is key. Each includes a 5-megapixel pop-up infrared camera, which supports facial recognition with Windows Hello. Dell also bundles a noise-canceling microphone and dual 5-watt integrated speakers. There's even a built-in mode to reduce blue light emissions. Dell is launching a 24-inch (FHD) version for $519.99, a 27-inch (QHD) model for $719.99, and a curved 34-inch (WQHD) variant for $1,149.99. All three will launch on February 16th. In other Dell-related news, the company has announced new versions of its Latitude laptops with Intel's new 11th Gen vPro chips and new features like an automated, integrated webcam shutter to physically block your camera when it's not in use.

Read more of this story at Slashdot.

World's Worst Internet Shutdowns Cost India $2.8 Billion in 2020

著者: msmash
2021年1月6日 09:10
Internet shutdowns cost India $2.8 billion, putting the South Asian nation at the top of a list of 21 countries that curbed citizens' web access in 2020. From a report: India -- the second-worst-hit nation by the Covid-19 pandemic in terms of overall confirmed infections -- accounted for about three-quarters of the $4 billion lost worldwide to internet curbs. Its losses more than doubled compared to 2019, a report from a U.K.-based digital privacy and security research group showed. Some countries known to limit Internet access or censor material like China and North Korea were not included in the report because researchers relied on publicly available open source information and documented internet and social media shutdowns. With 8,927 hours of blacked out or curbed bandwidth access, India restricted internet use more than any other nation, as restrictions originally imposed in 2019 continued throughout 2020, according to the Global Cost of Internet Shutdowns report released by Top10VPN.

Read more of this story at Slashdot.

Microsoft is Building a New Outlook App for Windows and Mac Powered by the Web

著者: msmash
2021年1月6日 08:30
Microsoft is building a universal Outlook client for Windows and Mac that will also replace the default Mail & Calendar apps on Windows 10 when ready. This new client is codenamed Monarch and is based on the already available Outlook Web app available in a browser today. From a report: Project Monarch is the end-goal for Microsoft's "One Outlook" vision, which aims to build a single Outlook client that works across PC, Mac, and the Web. Right now, Microsoft has a number of different Outlook clients for desktop, including Outlook Web, Outlook (Win32) for Windows, Outlook for Mac, and Mail & Calendar on Windows 10. Microsoft wants to replace the existing desktop clients with one app built with web technologies. The project will deliver Outlook as a single product, with the same user experience and codebase whether that be on Windows or Mac. It'll also have a much smaller footprint and be accessible to all users whether they're free Outlook consumers or commercial business customers. I'm told the app will feature native OS integrations with support for things like offline storage, share targets, notifications, and more. I understand that it's one of Microsoft's goals to make the new Monarch client feel as native to the OS as possible while remaining universal across platforms by basing the app on the Outlook website.

Read more of this story at Slashdot.

Sci-Hub: Scientists, Academics, Teachers & Students Protest Blocking Lawsuit

著者: BeauHD
2021年1月6日 07:50
An anonymous reader quotes a report from Torrent Freak: On December 21, 2020, Elsevier, Wiley, and American Chemical Society, filed a lawsuit hoping to have the court compel Indian ISPs to block both Sci-Hub and Libgen. Accusing the platforms of blatantly infringing their rights on a massive scale, the publishers said that due to the defiant nature of the platforms, ISP blocking is the only effective solution to hand. The massive complaint, which runs to 2,169 pages, was received by Sci-Hub with little time to review its contents. This not-insignificant issue was quickly pointed out to the Court, with counsel for Sci-Hub asking for an extension. After Sci-Hub assured the Court (pdf) that "no new articles or publications, in which the plaintiffs have copyright" would be uploaded to the site in advance of the next hearing, more time was granted to respond. The case is set for a hearing tomorrow but in advance of that, interested parties are attempting to put the government under pressure to intervene by preventing a blockade that, according to them, would cause damage to education and society in India. Speaking on behalf of thousands of scientists, academics, teachers and students, the Breakthrough Science Society (BSS) is expressing dismay at the publishers' efforts to prevent the "free flow of information" between those who produce it and those who seek it. [...] Instead of demonizing Sci-Hub founder Alexandra Elbakyan, the group describes her work as an effective solution to make research papers available to all for the benefit of humanity. As a result, the Breakthrough Science Society says it actually supports the work of Sci-Hub and Libgen, arguing that their work is not illegal and should continue unhindered. In an effort to pressure the Indian government to intervene on behalf of the people, the Breakthrough Science Society has launched a petition, calling on everyone from scientists and academics to teachers and students, to declare that knowledge should be accessible to all, not just those who can afford to pay the publishers' rates. Dr. Ashwani Mahajan, an Associate Professor at the University of Delhi, who among other things describes himself as a policy interventionist, says that if the ISPs are compelled to block Sci-Hub and Libgen, Indian researchers' access to information will be seriously undermined. While acknowledging that the government spends large sums of money to subscribe to journals, Mahajan says that researchers and students are heavily reliant on Sci-Hub and Libgen for information that the publishing industry itself does not pay for.

Read more of this story at Slashdot.

Qualcomm President Cristiano Amon Is Taking Over As CEO

著者: BeauHD
2021年1月6日 07:10
Qualcomm is getting a new CEO: Cristiano Amon, who already serves as president for the company, will replace Steve Mollenkopf, who took over as CEO in 2014. The Verge reports: Amon has already served as the public face of the company for some time, presiding over introductions of new products like the Snapdragon 888, making him an obvious choice to succeed Mollenkopf at the helm. Mollenkopf's tenure as CEO saw Qualcomm face numerous challenges: antitrust accusations, allegations of anticompetitive behavior, and a massive fight with Apple that saw the two companies sever their relationship (before patching things up in a settlement). But he also oversaw Qualcomm's growth into the juggernaut it is today, one that nearly completely dominates the industry for mobile processors. [...] Amon is set to take the reins on June 30th, with Mollenkopf set to stick around as a "strategic advisor" for an unspecified amount of time.

Read more of this story at Slashdot.

'Minecraft Earth' Will Shut Down On June 30th

著者: BeauHD
2021年1月6日 06:30
A little over a year after bringing Minecraft Earth in the US, Microsoft announced this week it will shut down the game later this year. Engadget reports: Minecraft Earth players have until June 30th, 2021, to play the augmented reality title before Microsoft shuts down its servers and it's no longer available to download from app marketplaces. Developer Mojang Studios blamed the coronavirus pandemic and all the changes to day-to-day life that have come with it for the shutdown. "Minecraft Earth was designed around free movement and collaborative play -- two things that have become near impossible in the current global situation," the studio said. Like Niantic with Pokemon Go, Mojang had tweaked the game to make it easier to play at home. Those changes clearly weren't enough. But if there's a silver lining in today's news, it's that Mojang plans to send off Minecraft Earth in style. The studio is rolling out one last update for the game it says contains changes "to make your time in Minecraft Earth as fun as possible." Among other tweaks, the update does away with real-money transactions and drastically reduces the time it will take for players to craft and build things within the game. It also offers players a chance to see all the content that Mojang was working on before today's announcement. "We hope these adjustments will allow you to explore, craft, and build more -- while staying safe indoors," the studio said. Once June 30th comes and goes, Microsoft will delete player data on July 1st. If you spent money in Minecraft Earth at any point during the life of the game, you'll get a token that will allow you to download the Bedrock edition of Minecraft to your mobile device. You can find more details on the shutdown on the Minecraft website.

Read more of this story at Slashdot.

81,000 UK-Owned.EU Domains Suspended As Brexit Transition Ends

著者: BeauHD
2021年1月6日 05:50
An anonymous reader quotes a report from ZDNet: Tens of thousands of website owners who are based in the UK might have started the year with an unpleasant surprise: Eurid, the registry manager of .eu domain names, has suspended .eu domain names registered by UK citizens as a result of the regulatory changes caused by Brexit. Suspended domain names can no longer support a website or service like email, and owners now have three months to prove their right to run a .eu domain. This means updating contact data to transfer the .eu domain to an EU-subsidiary outside the UK; or declaring citizenship or residence of an EU member state. Domain names will be re-instated as soon as contact data is updated, said Eurid -- but only for the next few months. Those who, after 31st March 2021, still haven't demonstrated their eligibility will see their domain name withdrawn, and made available again for general registration from January 2022 if no action is taken by then. Eurid said 81,000 domains, from 50,000 users, have been suspended. Eurid's suspension of UK domains comes after a series of mixed signals from the European Commission, which decides on the rules that guide the registration of .eu domains. EU regulations currently stipulate that .eu websites can only be allocated to EU citizens -- regardless of their place of residence -- as well as non-EU citizens and organizations established in a member state. In other words, once Brexit happened, UK-based .eu domains owned by UK citizens suddenly became non-EU websites hosted in a non-EU country.

Read more of this story at Slashdot.

NYSE Abruptly Reverses Plan To Delist Three Chinese Telecoms

著者: msmash
2021年1月6日 05:10
The New York Stock Exchange has abruptly reversed plans to delist three major Chinese telecommunications companies after consulting regulators about an investment ban ordered by President Donald Trump. From a report: Coming days before the companies were to be delisted -- and just over two weeks before Trump is to leave the White House -- the U-turn avoids a step that threatened to heighten U.S.-China tensions further. The Big Board gave no reason for its decision in a statement released during Asian hours, saying only that it had consulted "relevant regulatory authorities" about Trump's executive order, signed in November as part of his administration's push to check China's growing economic power. The move came as a surprise and sparked confusion among officials at the U.S. Treasury and State departments, and National Security Council, according to people familiar with the matter, who asked not to be identified because the conversations were confidential. The about-face, described as "bizarre" by a Jefferies Financial Group Inc. analyst, also whipsawed investors who on Monday had sold shares of the Chinese telecom companies and raced to bet on which stocks might be delisted next. China Mobile Ltd., China Telecom and China Unicom Hong Kong all rallied on Tuesday.

Read more of this story at Slashdot.

Italian Mobile Operator Offers To Replace SIM Cards After Massive Data Breach

著者: msmash
2021年1月6日 04:35
Ho Mobile, an Italian mobile operator, owned by Vodafone, has confirmed a massive data breach on Monday and is now taking the rare step of offering to replace the SIM cards of all affected customers. From a report: The breach is believed to have impacted roughly 2.5 million customers. It first came to light last month on December 28 when a security analyst spotted the telco's database being offered for sale on a dark web forum. While the company initially played down these initial reports, Ho confirmed the incident on Monday, in a message posted on its official website and via SMS messages sent to all impacted customers. Ho's statement confirms the security researcher's assessment that hackers broke into Ho's servers and stole details on Ho customers, including full names, telephone numbers, social security numbers, email addresses, dates and places of birth, nationality, and home addresses. While the telco said no financial data or call details were stolen in the intrusion, Ho admitted that hackers got their hands on details related to customers' SIM cards.

Read more of this story at Slashdot.

Google's iOS Apps Haven't Been Updated in Weeks. Could Apple's Privacy Labels Be the Reason?

著者: msmash
2021年1月6日 03:55
Not a single one of Google's iOS apps have been updated in almost a month -- an unusually long period for a tech behemoth not to release, at the very least, even a minor bug fix or stability update for one of its dozens of insanely popular iPhone and iPad apps. From a report: And after reviewing the latest release dates for all of Google's iOS apps, one reason for this lack of updates seems more likely than others: It could be related to Apple's new App Store privacy labels. The last time any Google iOS app was updated was on December 7. This includes updates to major Google apps like Google Drive, YouTube, Google Docs, Google Sheets, YouTube Music, Google Duo, Google Authenticator, and Gboard. Why is December 7 a significant date? Because starting on December 8, Apple mandated that any new apps or app updates submitted to the App Store would require the developer to fill out the privacy label information for the app it was submitting. This privacy label reveals exactly what data the app is collecting about the user and how that user data is being used. The label can then be viewed on an app's App Store listing page. The feature is part of Apple's push to make developers be more transparent in the ways they collect and use user data, so users can make more informed choices about the apps they choose to download.

Read more of this story at Slashdot.

Amazon Makes First Aircraft Purchase to Expand Cargo Network

著者: msmash
2021年1月6日 03:24
Amazon.com is buying 11 used Boeing 767-300 planes, the first time the online retail giant has purchased, rather than leased, aircraft for its fast-growing air cargo operation. From a report: The company on Tuesday said it was buying seven aircraft from Delta Air Lines and four from WestJet Airlines. The WestJet aircraft are currently being converted from passenger to cargo use and will join Amazon's fleet this year. The Delta jets will start flying routes in 2022. By the end of next year, Amazon expects to have more than 85 planes in service, a spokesperson said. Seattle-based Amazon has rapidly expanded its air cargo operations in recent years, part of an effort to speed up delivery of packages to customers and supplement capacity from such carriers as United Parcel Service.

Read more of this story at Slashdot.

In Georgia, Facebook's Changes Brought Back a Partisan News Feed

著者: msmash
2021年1月6日 01:25
An anonymous reader shares a report: As Georgians head to the polls to vote on their two U.S. Senators -- and effectively, partisan control of Congress -- on Tuesday, voters face an online landscape far different from what they saw in the weeks surrounding November's general election. In the fall, Facebook -- by far the most popular social network -- clamped down on sponsored posts about politics in order to ensure that misinformation would not spread the way that it had during the 2016 presidential election. But a few weeks before the Georgia race, Facebook turned off this safeguard in Georgia. The Markup decided to take a look behind the curtain to see if we could determine the impact on Georgia voters' news feeds. We recruited a panel of 58 Facebook users in the state and paid them to allow us to monitor their feeds, starting in late November, using custom software we built for our Citizen Browser project. The Citizen Browser project is a data-driven initiative to examine what content social media companies choose to amplify to their users. While Facebook's controls were in place, we found that links to traditional news sites were present in almost all election-related posts that appeared on our Georgia panelists' feeds. After Dec. 16, however, when Facebook flipped the switch to turn on political advertising for the Georgia election, we noticed that partisan content quickly elbowed out news sites, replacing a significant proportion of mentions of the election in our users' feeds. The Markup defined election-related content as anything containing mentions of Trump or Biden, the names of the four major-party senate candidates, or the terms "senate," "vote," "election," or "ballot." We looked at the URLs attached to those election-related posts and tabulated the most common domains. For the first half of the month, the most commonly appearing election-related content came primarily from news outlets such as The Wall Street Journal, CNN, and the Atlanta Journal-Constitution. But after Dec. 16, just over one third of the most commonly appearing domains were partisan campaign sites buying ads, including WrongForGeorgia.com, an attack site targeting the Democratic candidates; and DeserveBetter.org, an attack site targeting the incumbent Republican senators. We discarded any domains that only appeared on a single panelist's feed.

Read more of this story at Slashdot.

❌