Twitter to trim 8 percent of its staff

Found on CNet News on Tuesday, 13 October 2015
Browse Internet

The social network will lay off up to 336 employees, or about 8 percent of its workforce, as it looks to streamline its operations, Dorsey said Tuesday.

Known for the brevity and speed of users' posts, Twitter has been struggling trying to engage to a broader audience.

Twitter had 4,100 workers around the world, half of them engineers and the rest spread among administrative and marketing, as of June 30.

Twitter's stock rose as much as 5 percent Tuesday on news about the layoffs.

Stock market logics: fire 8% and win 5%. Maybe if Dorsey lays off 80% he could make 50% more? That said, it is surprising how something as trivial as posting short lines of text (which are in 99.999% of all cases utterly pointless) onto a website can provide jobs for 4100 people.

Brute Force Amplification Attacks Against WordPress XMLRPC

Found on Sucuri on Sunday, 11 October 2015
Browse Internet

One of the hidden features of XML-RPC is that you can use the system.multicall method to execute multiple methods inside a single request. That’s very useful as it allow application to pass multiple commands within one HTTP request.

Instead of going against wp-login.php (which can be easily blocked or protected via .htaccess) or doing a single attempt against xmlrpc, attackers are leveraging the system.multicall method to attempt to guess hundreds of passwords within just one HTTP request.

Wordpress is the new Flash, a pile of code riddled with bugs. Actually this is not really a bug, but a decision. Before, xmlrpc.php was pretty much considered a security hole, but WP devs now decided that this security hole should be always enabled starting with version 3.5 (while at the same time they removed the option to turn it off from the backend). Better make sure that access to xmlrpc.php is blocked via .htaccess (don't rely on some random WP "protection" plugin) or just rename/delete that file. Or even better, delete that resource hogging Wordpress entirely.

LogMeIn Buys Password Manager LastPass for $110 Million

Found on eWEEK on Friday, 09 October 2015
Browse Internet

"We believe this transaction instantly gives us a market leading position in password management, while also providing a highly favorable foundation for delivering the next generation of identity and access management solutions to individuals, teams and companies," LogMeIn CEO Michael Simon said in a statement.

One commenter to the announcement wrote, "Oh no! This is NOT good news. logmein has a terrible track record with acquisitions. I feel story for the LastPass team, your management has sold you out. Good luck finding new jobs. [Has] anyone got any good recommendations for alternative password managers? Time to jump ship before this ship sinks."

Nobody with a few braincells left should ever entrust passwords to some random online service.

ISP Announces It's Blocking All Facebook And Google Ads Until Companies Pay A Troll Toll

Found on Techdirt on Friday, 02 October 2015
Browse Internet

Caribbean and South Pacific ISP Digicel has started blocking Google and Facebook ads from appearing on the company's mobile network in the apparent belief that the service provider is owed a slice of these companies' ad revenues. In a notice posted to the Digicel website, this move is framed as something that was motivated purely for altruistic, pro-consumer reasons.

Fact aside that blocking ads might actually be a good thing for users, where should it end? A tax from all money earned via their connection? A fraction of all your online banking done via their connection?

Microsoft to Help Enterprises Plunge Into Cloudy Big Data Lakes

Found on eWEEK on Tuesday, 29 September 2015
Browse Internet

Microsoft announced some major new developments surrounding its cloud-based big data processing capabilities in advance of AzureCon, a free virtual event that kicks off Sept. 29.

"The Data Lake Store provides a single repository where you can easily capture data of any size, type and speed without forcing changes to your application as data scales," stated Rengarajan in a Sept. 28 announcement. "In the store, data can be securely shared for collaboration and is accessible for processing and analytics from HDFS [Hadoop Distributed File System] applications and tools."

Well, with all the data Windows 10 is collecting, MS should have some experience in storing and processing it.

Facebook partners with UN to bring Internet access to refugee camps

Found on CNet News on Saturday, 26 September 2015
Browse Internet

Access to the Web is key to increasing quality of life, Zuckerberg added, saying it not only helps people communicate but can also help lift them from poverty.

Critics of these programs say the companies stand to benefit from expanding pools of people using their services, which primarily make money from advertising. Others complain the businesses are also trying to create de facto monopolies on Internet access.

Maybe Zucky should think about a bit more basic things which are lacking in the refugee camps: food, water and medical support, as well as education for the children. Having access to some "friends" you mostly never met in real life is one of the least worries for the people living there, trying not to get killed.

What to Do When the Cloud Comes Crashing Down

Found on eWEEK on Thursday, 24 September 2015
Browse Internet

If it seems like major services have been crashing a lot lately and for extended periods, you're not imagining things. A cluster of crashes has plagued users of a wide variety of high-profile cloud services in the past month.

There's nothing magical about the cloud. "The cloud" is just somebody else's computers located somewhere else. All the problems that exist in one's own data-center can exist within the cloud services.

The cloud comes with a certain degree of helplessness.

All because a few "smart" people type numbers into their calculators and come up with the result that outsourcing critical infrastructure saves 1% per year. You can do that with unimportant parts where you just shrug and move on when they go offline, but you don't want the core of your company to depend on the uptime of someone else. Not to mention that storing business information outside your full control is retarded.

AWS knocks Amazon, Netflix, Tinder and IMDb offline in MEGA data collapse

Found on The Register on Sunday, 20 September 2015
Browse Internet

Amazon's Web Services (AWS) have been hit by a monster outage affecting the company's cloudy systems, bringing many sites down with it in the process.

Amazon said it was recovering from the database blunder, but as part of the fix the company was forced to throttle APIs to recover the service.

That should put a little smile on the faces of those sysadmins who, after a reboot, have to deal with users who use AWS et al as a reference because of their perfect uptime.

Creator of Top iOS Ad Blocker Pulls App After Two Days

Found on Slashdot on Friday, 18 September 2015
Browse Internet

One of the most important aspects of the iOS 9 launch was that ad blocking software is now allowed on the App Store. Ad blocking apps rocketed to the top of the store's rankings, led by Marco Arment's Peace. A day afterward, Arment talked about the cognitive dissonance he felt from having his software blocking the (admittedly well-behaving) ads on his own website. Now, Arment has pulled Peace from the App Store, saying its success "just doesn't feel good."

He pulls the app two days after he released the finished product? At the moment it went public his moral compass pointed into another direction? That explanation is really hard to buy (no conspirancy theory intended).

Google accuses SEO biz Local Lighthouse of false claims, robo-calls

Found on The Register on Thursday, 17 September 2015
Browse Internet

The American web goliath has taken legal action against the smaller biz in the northern district of California, alleging Local Lighthouse uses nuisance calls to sell its services. Google accuses the Costa Mesa, California-based SEO gang of breaking laws on trademarks, unfair competition, and false advertising.

Google claims Local Lighthouse sales representatives were introducing themselves as "Google Local Listing representatives" – and had been using software to play pre-recorded messages to people in cold-calls, or in other words: robo-dialers.

People should not rely on "unique" Wordpress websites, stuffed with tons of SEO plugins or optimizers in the grey area and create truly unique websites instead.