Viacom exposes crown jewels to world+dog in AWS S3 bucket blunder

Found on The Register on Tuesday, 19 September 2017
Browse Various

Researchers found a wide-open, public-facing misconfigured AWS S3 bucket containing pretty much everything a hacker would need to take down the company's IT systems.

The Amazon-hosted bucket could be accessed by any netizen stumbling upon it, and contained the passwords and manifests for Viacom's servers, as well as the access key and private key for the corporation's AWS account.

There you have companies with their pockets full of money, and they still decide to dump everything "into the cloud", putting their entire business into the hands of someone else. At the same time, they could employ competent admins and run their own, properly secured DC.

Facebook Enabled Advertisers to Reach ‘Jew Haters’

Found on Pro Publica on Friday, 15 September 2017
Browse Various

Until this week, when we asked Facebook about it, the world’s largest social network enabled advertisers to direct their pitches to the news feeds of almost 2,300 people who expressed interest in the topics of “Jew hater,” “How to burn jews,” or, “History of ‘why jews ruin the world.’”

Facebook’s automated system suggested “Second Amendment” as an additional category that would boost our audience size to 119,000 people, presumably because its system had correlated gun enthusiasts with anti-Semites.

While Facebook blames the algorithm for all this, it claims at the same time that algorithms can successfully stop hate speech online. It's not very reassuring.

Equifax had 'admin' as login and password in Argentina

Found on BBC News on Wednesday, 13 September 2017
Browse Various

"We learned of a potential vulnerability in an internal portal in Argentina which was not in any way connected to the cyber-security event that occurred in the United States last week," an Equifax spokeswoman told the BBC.

"[It] was wide open, protected by perhaps the most easy-to-guess password combination ever: admin/admin," wrote Mr Krebs.

That shows non-existant basic security features which would have prevented this.

Equifax mega-leak: Security wonks smack firm over breach notification plan

Found on The Register on Saturday, 09 September 2017
Browse Various

Equifax had weeks to prepare for its breach notification, so its decision to do so via a basic Wordpress site (oh, err) using a free shared CloudFlare SSL cert is somewhat puzzling. “For some reason Equifax used the 6 weeks to set up a new domain asking for SSN numbers, with anonymous Whois on Cloudflare,” said security consultant Kevin Beaumont.

The whole approach already seems to have gone awry, with OpenDNS flagging up the site as a potential phishing locale in an apparent false positive.

You could not make this up even if you tried.

In China, facial recognition is used to buy KFC, board planes, and catch drug users

Found on Quartz on Saturday, 02 September 2017
Browse Various

Over the past several months, private companies and government entities have successfully deployed facial recognition technology for a number of different purposes, ranging from shopping to public safety.

The speed of deployment for facial recognition in China follows the country’s commitment to boosting its capabilities in artificial intelligence.

In the end it will give the government a perfect method for tracking everybody. No more anonymous payments with cash, and all your activities can be linked together, plus all your travels.

Amazon now offers 2-hour booze delivery

Found on SF Gate on Saturday, 26 August 2017
Browse Various

2-hour delivery on booze is free of charge, but if you find yourself in a truly desperate situation, 1-hour delivery is available for an extra $7.99. ID's are checked upon delivery by couriers.

$26 for a 12-pack of Coronas, $15 for a 6-pack of Angry Orchard, and $23 for a bottle of chardonnay, for example. Compare these to the regular retail prices of $18 for the Coronas, $10 for the cider, and $15 for the chardonnay (all prices taken from BevMo).

First world problems. Someone who drinks alcohol more than once a year should always have a few different bottles at home.

Vodafone won't pay employee expenses for cups of coffee

Found on The Register on Friday, 25 August 2017
Browse Various

"This is crazy, being expected to travel around the country and fund yourself," one source at Vodafone told us. "If it was a company of few people you'd expect this. I'm angry about it. They're charging customers several hundred a day for face-to-face meetings. I expect there's enough money to buy me a cup of coffee."

If you had your experiences with Vodafone, you won't be surprised. At all.

Wading Through AccuWeather’s Bullshit Response

Found on Daring Fireball on Wednesday, 23 August 2017
Browse Various

AccuWeather issued a statement regarding the controversy over their app sending location-identifying information to a monetization firm.

The accusation is that their iOS app is collecting Wi-Fi router names and MAC addresses and sending them to servers that belong to Reveal Mobile, which in turn can easily be used to locate the user.

Reveal’s own description of their business is that they sell user location to retailers. Why else would be they be collecting router MAC addresses if not to use a reverse lookup to locate users?

Your daily reminder that you are the product that is being sold. The real question should be why the underlying OS has no simple controls to decide what can get out and what can't. Instead, people are getting dumbed down to sell them more efficiently.

Elon Musk backs call for global ban on killer robots

Found on CNN on Monday, 21 August 2017
Browse Various

"Lethal autonomous weapons threaten to become the third revolution in warfare. Once developed, they will permit armed conflict to be fought at a scale greater than ever, and at timescales faster than humans can comprehend," the experts warn in an open letter released Monday.

More than a dozen countries -- including the United States, China, Israel, South Korea, Russia and Britain -- are currently developing autonomous weapons systems, according to Human Rights Watch.

Nice idea, but it would be the first time that the military listens to ethical argumentations.

Why Amazon's UK tax bill has dropped 50%

Found on BBC News on Friday, 11 August 2017
Browse Various

Taxes are paid on profit not turnover. It paid lower taxes because it made lower profits. Last year it made £48m in profit - this year it made only £24m so it paid £7m tax compared to £15m.

There is heightened sensitivity around the tax affairs of technology giants such as Amazon, Google and Apple. The challenge of adapting a tax code written for a bygone era to work effectively on technology multinationals who have socked billions away in low tax jurisdictions remains.

As long as politicians are afraid to poke big corprations that hire those experts who know all the tax loopholes, the government will not make as much money as it could.