Salesforce fires red team staffers who gave Defcon talk

Found on ZD Net on Thursday, 10 August 2017
Browse Various

Salesforce has fired its director of offensive security and another senior staff member after they gave talk at the Defcon security conference talk in Las Vegas last month.

The talk was to reveal MEATPISTOL, a modular malware framework for implant creation, infrastructure automation, and shell interaction, aimed at reducing the time and energy spent on reconfiguration and rewriting malware.

Khalil Sehnaoui, a security researcher who was at the conference, said in a tweet: "If you're going to start a rebellion amongst all your red-teamers, don't do it at Defcon."

That's one real PR disaster for Salesforce.

Millennials Unearth an Amazing Hack to Get Free TV: the Antenna

Found on Cetusnews on Wednesday, 02 August 2017
Browse Various

“An antenna was not even on my radar,” he says. He went online and discovered he could buy one for $20 and watch major networks like ABC, NBC, Fox and CBS free.

Almost a third of Americans (29%) are unaware local TV is available free, according to a June survey by the National Association of Broadcasters, an industry trade group.

Now, Ms. Herrick is the one who regularly has to explain to puzzled guests how she’s able to watch free television. “Everyone I talked to, they had no idea.”

Let's just hope this is a bad hoax story and people are not really that retarded.

Pokémon Go Fest attendees to get refunds as technical issues break the event

Found on Techcrunch on Sunday, 23 July 2017
Browse Various

Within minutes of the first attendees filing into Grant Park, the cell networks got shaky. Within 20 minutes of the doors officially opening, every network was down.

Tapping a monster to catch it would result in nothing but an error screen — a particular punch in the gut to many a player who traveled far in hopes of completing their Pokedex, as the Park was set to spawn some of the game’s rarest monsters.

You would think that a company who expects such a large number of fans would, let's say, asks one or two big phone companies how to cope with such a surge in network activity.

For 4 Seattle women called Alexa, it’s funny, frustrating to share name with Amazon device

Found on Seattle Times on Saturday, 22 July 2017
Browse Various

Since Amazon introduced the Alexa-enabled Echo device in 2014, the jokes have become so omnipresent that Alexa Philbeck, 29, briefly considered changing, or at least obscuring, her name.

“If I introduced myself, people assumed my name was Melissa or Alyssa,” she says, “Now when I introduce myself … I’ll say, ‘My name’s Alexa,’ and then sometimes I’ll say, ‘Like the Amazon Echo.’ ”

In a few years nobody will care about that gadget anymore; no need to change the name you grew up with.

The Myth of Drug Expiration Dates

Found on ProPublica on Wednesday, 19 July 2017
Browse Various

ProPublica has been researching why the U.S. health care system is the most expensive in the world. One answer, broadly, is waste — some of it buried in practices that the medical establishment and the rest of us take for granted.

In his lab, Gerona ran tests on the decades-old drugs, including some now defunct brands such as the diet pills Obocell (once pitched to doctors with a portly figurine called “Mr. Obocell”) and Bamadex.

The findings surprised both researchers: A dozen of the 14 compounds were still as potent as they were when they were manufactured, some at almost 100 percent of their labeled concentrations.

Longer expiration times equal less profit. It's as simple as that.

Home deliveries of knives bought online to be banned in UK

Found on The Guardian on Tuesday, 18 July 2017
Browse Various

The delivery of knives bought online to private addresses is to be banned under a package of measures to tackle knife crime to be announced by the home secretary, Amber Rudd.

The home secretary, announcing the proposed new offences, said: “Knife crime has devastating consequences. I am determined to tackle this and do all I can to break the deadly cycle and protect our children, families and communities.

The terrorists have won. Next thing to be banned will be sticks and stones.

Minneapolis airport fails 95 percent of security tests, sources say

Found on Fox 9 on Wednesday, 12 July 2017
Browse Various

When put to the test, Minneapolis-St. Paul International Airport failed 95 percent of security tests conducted at the airport last week, according to Fox 9 sources.

In most cases, they succeeded in getting the banned items though. 17 out of 18 tries by the undercover federal agents saw explosive materials, fake weapons or drugs pass through TSA screening undetected.

Two sources said that the tests carried out Thursday were eventually stopped after the failure rate reached 95 percent.

When asked about Thursday’s failing grade, the TSA said, “TSA cannot confirm or deny the results of internal tests and condemns the release of any information that could compromise our nation’s security."

TSA should be renamed to TFA: The Failure Agency. Such catastrophic results should be enough reason to call it quits and end this embarrassing project.

Sharing firm loses most of its 300,000 umbrellas

Found on BBC News on Tuesday, 11 July 2017
Browse Various

Sharing E Umbrella had left 300,000 brollies in public places in 11 cities, including Shanghai and Nanjing.

The umbrellas were probably taken home by people, suggested the firm's founder Zhao Shuping in an interview with Chinese website, the Paper.

Seems like the concept needs a little bit of polishing.

Laptop ban led to 20-percent drop in flights for one Mideast airline

Found on Ars Technica on Wednesday, 05 July 2017
Browse Various

The US Homeland Security chief said last week his department will insist on "enhanced security measures" for US-bound flights around the world, although it gave very little detail about the new measures, which will be "both seen and unseen."

Citing an unnamed source at Qatar Airways, the Times reports that TSA wants all US-bound passengers be subject to explosive trace detection screening, whether their bags go in the main cabin or in the hold.

If only someone would finally admit that the TSA is a huge failure and needs to be replaced with a sane checking method.

German e-gov protocol carries ancient vulns

Found on The Register on Monday, 03 July 2017
Browse Various

According to SEC Consult, the library's bugs allow attackers to decrypt messages, modify signed messages, and attack hosts implementing the protocol.

CVE-2017-10669 is a signature wrapping attack that allows the miscreant to change the contents of a message without invalidating the signature; and finally there's a deserialisation bug that, like CVE-2017-10670, allows an external entity injection.

So much for the promised security. One would assume that the government hires developers who know what they are doing.