OVH data centres go TITSUP*

Found on The Register on Thursday, 09 November 2017
Browse Internet

Power outages have brought some OVH data servers to their knees, and unspecified issues have broken optical cable routing in Europe for POP.

CEO Octave Klaba tweeted that "2 separated 20kV lines are down" and said the team was trying to restart generators for its Central Europe SBG1 and SG4 data centres.

It looks like squirrels are pretty active lately.

Snapchat continues to sputter

Found on CNet News on Wednesday, 08 November 2017
Browse Internet

The numbers illustrate the fact that Snapchat still faces stiff competition from Facebook and Instagram.

More bad news: Snap also took a $40 million charge to write down unsold Spectacles. Spiegel said the company made the "wrong decision" based on the early sales traction.

Meanwhile, Snap's stock remains well below its post-initial public offering peak price of $29.44 as shares have declined nearly 40 percent since going public.

An application to send photos to someone. That's all it is. The dotcom bubble is still alive and kicking.

Facebook to Fight Revenge Porn by Letting Potential Victims Upload Nudes in Advance

Found on Bleeping Computer on Tuesday, 07 November 2017
Browse Internet

This process involves the victim sending a copy of the nude photo to his own account, via Facebook Messenger. This implies uploading a copy of the nude photo on Facebook Messenger, the very same act the victim is trying to prevent.

Facebook says it's not storing a copy of the photo, but only computing the file's hash and adding it to its database of revenge porn imagery.

No, it's not April. Nobody should trust Facebook that much (or at all); a company who digs through all your private information to earn a few cents. The best solution is not to allow anybody to take possibly embarrassing images or videos; you do not have to take a selfie of everything you do.

Google can read your corporate data. Are you OK with that?

Found on Infoworld on Saturday, 04 November 2017
Browse Internet

Many people worried that Google was scanning users’ documents in real time to determine if they’re being mean or somehow bad. You actually agree to such oversight in Google G Suite’s terms of service.

Even though this is spelled out in the terms of service, it’s uncomfortably Big Brother-ish, and raises anew questions about how confidential and secure corporate information really is in the cloud.

As soon as you give your data to the cloud, it's not longer yours. Nobody bothers to read the TOS when signing up, and some give the hoster even full rights on your content. People need to learn that they are nothing but sheep if they use those services blindly. If your data is even just remotely important, keep it under your control.

WhatsApp messenger hit by temporary outage; Facebook investigating

Found on Reuters on Friday, 03 November 2017
Browse Internet

Users in countries ranging from Brazil and Russia to Vietnam and Myanmar reported on social media that WhatsApp was down in their countries. The extent of the outage and the reasons for it were not immediately known.

WhatsApp has faced similar widespread outages this year, including for several hours in May.

With everybody relying on a few single single services like WhatApp, Facebook and Twitter, it would be so interesting to see them down for a few days.

Google investigates mysterious vanishing files

Found on BBC News on Tuesday, 31 October 2017
Browse Internet

Numerous Google Docs users have reported that they are being mysteriously locked out of certain files in their accounts.

Users have taken to Twitter to complain about the issue, saying that while they were working on documents the screen suddenly froze, and then a message came up telling them they could no longer access a file.

Another day, and another reminder why giving up control over your files by storing them "in the cloud" is a bad idea.

YouTube tweaks advertising algorithm

Found on BBC News on Monday, 30 October 2017
Browse Internet

The update comes after YouTube made changes to the way videos were monetised, to stop ads appearing alongside extremist content.

In April and May this year, YouTube acted after investigations revealed that ads for big brands were being regularly shown on racist videos or those that encouraged violence against particular groups.

So it looks like what today gets called "extremist content" made enough money for them so they need to shuffle ads around for compensation.

The OWASP Top 10 is killing me, and killing you!

Found on Hewlett Packard Enterprise on Sunday, 29 October 2017
Browse Internet

Software developers and testers must be sick of hearing security nuts rant, "Beware SQL injection! Monitor for cross-site scripting! Watch for hijacked session credentials!" I suspect the developers tune us out. Why? Because we've been raving about the same defects for most of their careers. Truth is, though, the same set of major security vulnerabilities persists year after year, decade after decade.

It's sad that eight out of 10 of the issues from 2013 are still top security issues in 2017. In fact, if you consider that the draft 2017 list combined two of the 2013 items, it's actually nine out of 10. Ouch.

It's a combination of different reasons. Developers with increasing experience, who would avoid those pitfalls, move up the ladder and don't actually develop actively anymore, but try to manage a group of unexperienced newbies who are cheaper, but make those mistakes again. Next, there is the reliance on frameworks. Projects today quickly end up in a dependency hell because the developers just pull in code from a third party that's neither monitored nor validated what can lead to massive problems that should not exist in the first place. Finally, let's not forget about deadlines. Security always has been a neglected child, because the difference between a secure and a swiss-cheese frontend is not really obvious during presentations; and when competitor A does it in half the time (and price) of competitor B, the customer will pick the cheaper solution.

Whois? No, Whowas: Incoming Euro privacy rules torpedo domain registration system

Found on The Register on Thursday, 26 October 2017
Browse Internet

GDPR will kick in next May, and, critically, it impacts not just European business but any business that holds data on European citizens. Put most simply, GDPR requires businesses to get the explicit consent of users to gather, store and, particularly, publish their information.

Intellectual property lawyers prefer a system that provides them with details on who owns a particular domain name (especially given widespread copyright infringement online) to one that excludes them from such information altogether.

Given that there are already whois services which hide the owner's identity and only offer an indirect way to contact this person, it cannot be that bad. In fact, it would be a good change.

How Google turns your kids into little Google borgs

Found on CNet News on Sunday, 15 October 2017
Browse Internet

Kids will -- if the company has its way -- grow up to utter a company name, as if they have some sort of personal relationship with one of the biggest corporations in the world.

The idea, as Jonathan Jarvis, a former creative director on Google's Labs team, told Business Insider last year was that Google's assistant should make you feel like Wonder Person.

That probably will work because the majority of people is simple enough to fall for this and feel special when they manage to use a device as it was intended.