DoorDash doesn't just pick up your food orders, it delivers your data to hackers, too

Found on The Register on Tuesday, 01 October 2019
Browse Various

The dial-a-serf service said that on May 4 of this year some miscreant was able to break into one of DoorDash's technology providers, and view account information including the physical addresses of punters, order histories, phone numbers, and hashed and salted passwords, plus the last four digits of some users' credit card numbers or bank accounts.

"Approximately 4.9 million consumers, Dashers, and merchants who joined our platform on or before April 5, 2018, are affected," DoorDash said in its disclosure. "Users who joined after April 5, 2018 are not affected."

Just another Groundhog Day when it comes to the protection of personal data.

Plastic tea bags shed billions of microplastic particles into the cup

Found on New Scientist on Wednesday, 25 September 2019
Browse Various

A Canadian team found that steeping a plastic tea bag at a brewing temperature of 95°C releases around 11.6 billion microplastics – tiny pieces of plastic between 100 nanometres and 5 millimetres in size – into a single cup. That is several orders of magnitude higher than other foods and drinks.

“Table salt, which has a relatively high microplastic content, has been reported to contain approximately 0.005 micrograms plastic per gram salt. A cup of tea contains thousands of times greater mass of plastic, at 16 micrograms per cup.”

Good, so this hits directly those who buy his junk in the first place. Tea in plastic tea bags should be flat out illegal.

Star Trek: Deep Space Nine actor Aron Eisenberg has died at 50

Found on CNet News on Tuesday, 24 September 2019
Browse Various

Eisenberg played Nog, the first Ferengi to join Starfleet, and appeared in 40 episodes from across all seven seasons. The show ran from 1993 to 1999. His character was the son of Rom, the nephew of Quark, and the best friend of Jake Sisko, who was the son of commanding officer Benjamin Sisko.

"I have lost a great friend and the world has lost a great heart," Armin Shimerman, the actor who played Quark, wrote in a tweet. "He was a man of conviction and enormous sensitivity and the best of humanity."

He was a really good actor and even though quite a few of DS9 episodes were pretty boring, he helped to make the rest of the episodes entertaining.

Five NHS trusts do DeepMind data deal with Google. One says no

Found on The Register on Friday, 20 September 2019
Browse Various

The agreement is controversial because DeepMind was handed 1.6 million patient health records by the Royal Free Hospital despite no patient having given their consent for their data to be shared or used in this way.

One of Google's first actions on borging DeepMind was to shut its independent ethics review panel.

"Handing 1.5m patients' records to Google was justified in 2015 as the only option – has the NHS under Matt Hancock made no progress on NHS tech?"

So saying "no" was not an option? Sorry, but nobody will believe that. Especially not the millions of people who now have their most personal information shared with Alphabet.

Booking.com still duping customers, says watchdog

Found on BBC News on Thursday, 19 September 2019
Browse Various

The sites had previously been found to be engaging in practices which included misleading discount claims, pressure-selling and hidden charges.

"We found clear evidence that Booking.com has not yet sufficiently cleaned up its act and is flouting the rules on pressure-selling, which could lead to millions of consumers being rushed into making a booking," she said.

A hotelier in Cornwall told BBC News: "I have a small B&B, which I have owned for three years, and have not yet made a profit, due to Booking.com.

Sadly his is common practice. "Only 1 left" is a common sight on all sorts of shops too.

Confidential patient data accessible on the internet – a massive global data leak waiting to happen

Found on Greenbone on Wednesday, 18 September 2019
Browse Various

Greenbone did not have to write any special code to see what patient data was accessible, nor did any software vulnerability have to be exploited, or a zero-day attack carried out. As such, you don’t need to be a hacker to gain access to this highly sensitive data, it’s all visible with the help of freely available tools. To view and – if desired – download this data, you only need a list of IPs and a corresponding viewer. Both are available for download on the net.

Altogether, we unearthed more than 24 million records which, combined linked to more than 700 million images. Of these scans, 400 million were actually downloadable.

Who will be responsible? Nobody, as usual.

MoviePass will shut down for good on Sept. 14

Found on CNBC on Saturday, 14 September 2019
Browse Various

Shares of MoviePass parent company Helios and Matheson Analytics dropped 10% Friday afternoon, though the stock trades for a fraction of a penny.

Among the options it’s considering are a sale of the company in its entirety, a sale of the company’s assets, including MoviePass, Moviefone and MoviePass Films, as well as the possibility of a reorganization of the company.

It should have been obvious from the first day that this business idea would not work out.

Storm Area 51 Festival Canceled Because It Was a 'Possible Humanitarian Disaster'

Found on Vice on Tuesday, 10 September 2019
Browse Various

“Due to the lack of infrastructure, poor planning, risk management, and blatant disregard for the safety of the expected 10,000+ AlienStock attendees, we decided to pull the plug on the festival,” a message on AlienStock’s website reads.

The local town has been actively warning people on its website not to come, noting that many local residents are armed and would be willing to defend their property.

Darwin Awards just lost a lot of candidates.

MoviePass exposed thousands of unencrypted customer card numbers

Found on Techcrunch on Sunday, 08 September 2019
Browse Various

MoviePass customer cards are like normal debit cards: they’re issued by Mastercard and store a cash balance, which users who sign up to the subscription service can use to pay to watch a catalog of movies.

We also found records containing customers’ personal credit card numbers and their expiry date — which included billing information, including names and postal addresses. Among the records we reviewed, we found records with enough information to make fraudulent card purchases.

Security researcher Nitish Shah told TechCrunch he also found the exposed database months earlier. “I even notified them, but they [didn’t bother] to reply or fix it,” he said.

MoviePass has lost millions of customers already, and they probably will be out of business soon.

Allowlist, not whitelist. Blocklist, not blacklist. Goodbye, wtf

Found on The Register on Friday, 06 September 2019
Browse Various

Issue 981129 in the Chromium bug log lists a suggestion by Microsoft to “cleanup of potentially offensive terms in codebase” aims to rid the software blueprints of language such as whitelist (change to allowlist), blacklist (change to blocklist), “offensive terms using ‘wtf’ as protocol messages,” and other infelicities.

Googler Rick Byers, a Chromium engineer, gave the issue a cautious welcome, saying: "This sounds like a good strategy to me, thanks for doing this! We certainly have never intended for anything in the codebase to be potentially offensive, but I'm also not aware of anyone making an effort to find them all."

In May, Microsoft announced AI features in Word that, among other features, will emit “advice on more concise and inclusive language such as ‘police officer’ instead of ‘policeman.’"

All this is getting more and more ridiculous with every day and dangerously close to Newspeak; and that is not a world anybody could want.