Windows 10 bug corrupts your hard drive on seeing this file's icon

Found on Bleeping Computer on Tuesday, 19 January 2021
Browse Software

In multiple tests by BleepingComputer, this one-liner can be delivered hidden inside a Windows shortcut file, a ZIP archive, batch files, or various other vectors to trigger hard drive errors that corrupt the filesystem index instantly.

What's worse is, the vulnerability can be triggered by standard and low privileged user accounts on Windows 10 systems.

BleepingComputer's tests also show that you can use this command on any drive, not only the C: drive and that drive will subsequently become corrupted.

A bunch of trolls and pranksters will have a fun time with that.

Firefox to block Backspace key from working as "Back" button

Found on ZD Net on Monday, 18 January 2021
Browse Software

The change is currently active in the Firefox Nightly version and is expected to go live in Firefox 86, scheduled to be released next month, in late February 2021.

As with most disrupting changes like these, some users are most likely to be disgruntled about the browser maker's decision.

Hooray for Mozilla who, once again, make their browser less and less interesting.

Australia rebukes Google for blocking local content

Found on BBC News on Sunday, 17 January 2021
Browse Internet

The Australian government has urged Google to focus on paying for Australian content instead of blocking it.

After media reports said Australian news websites were not showing up in searches, Google confirmed it was blocking the sites for a small number of users.

“The digital giants should focus on paying for original content, not blocking it. That’s my message to those digital giants,” said Australian Treasurer Josh Frydenberg.

If a company does not want to do any more business with Australia, then it's just like that. Yes, politicians make the rules in Australia, but if you do not like these laws, you pull out. Simple as that.

The NSA warns enterprises to beware of third-party DNS resolvers

Found on Ars Technica on Saturday, 16 January 2021
Browse Internet

On Thursday, however, the National Security Agency said in some cases Fortune 500 companies, large government agencies, and other enterprise users are better off not using it. The reason: the same encryption that thwarts malicious third parties can hamper engineers’ efforts to secure their networks.

“DoH provides the benefit of encrypted DNS transactions, but it can also bring issues to enterprises, including a false sense of security, bypassing of DNS monitoring and protections, concerns for internal network configurations and information, and exploitation of upstream DNS traffic,” NSA officials wrote in published recommendations.

Network admins have brought up these problems over and over, and have been laughed at and ridiculed. Glad to see others see the big problems of DoH too and hopefully DoT takes the lead.

YouTube suspends Trump’s account, disables comments “indefinitely”

Found on Ars Technica on Friday, 15 January 2021
Browse Censorship

YouTube, following in the path of very nearly every other social media platform, is suspending President Donald Trump's channel due to concerns that he will use it to foment additional violence in the coming days.

While it is possible Trump may have his account reinstated after that period, comments to his videos are shut down "indefinitely," due to "safety concerns found in the comments section," YouTube added.

Like Twitter and others, they only act when they have nothing to fear.

Pirate Bay co-founder criticises Parler for its lack of resilience

Found on The Register on Thursday, 14 January 2021
Browse Various

Peter Sunde Kolmisoppi took to Twitter to offer his opinions.

The most ironic thing is that TPBs enemies include not just the US government but also many European and the Russian one. Compared to gab/parlor which is supported by the current president of the US and probably liked by the Russian one too.

It's one thing to run a few webservers that only list magnet links, and a full featured messaging platform.

From today, Adobe Flash Player no longer works.

Found on The Register on Wednesday, 13 January 2021
Browse Software

What's happened is that Adobe snuck a logic bomb into its Flash software some releases ago that activates on January 12, and causes the code to refuse to render any more content from that date. Adobe has also removed previous versions from its site, and "strongly recommends all users immediately uninstall Flash Player to help protect their systems."

After years of assaults, and the rise of alternatives, Adobe announced the demise of Flash in July 2017, saying support will be dropped on December 31, 2020.

It was about time. Flash has been a major reason for exploits because it was riddled with bugs.

Elon Musk advises people to ditch Facebook and use Signal

Found on Digital Trends on Tuesday, 12 January 2021
Browse Internet

The tweets seem to have been prompted by a recent change to Facebook’s privacy policy. As reported by The Hacker News, the new updates allow more sharing of data between Facebook and its partner company WhatsApp, including the sharing of phone numbers, interactions on the platform, information about mobile devices used to access the service, and IP addresses. If WhatsApp users do not agree to the data sharing, their accounts are disabled.

Disabling the WhatsApp accounts is the best users can hope for.

Parler: Amazon to remove site from web hosting service

Found on BBC News on Monday, 11 January 2021
Browse Censorship

Parler styles itself as an "unbiased" social media and has proved popular with people banned from Twitter.

Amazon told Parler it had found 98 posts on the site that encouraged violence. Apple and Google have removed the app from their stores.

If 98 posts are enough to shut down a network, Facebook and Twitter should have been cut off years ago. This will only support the development of decentralized networks without any chance for a normal content moderation; and then extremists cannot be hidden anymore.

Donald Trump has finally earned a permaban from Twitter

Found on Ars Technica on Sunday, 10 January 2021
Browse Censorship

"After close review of recent Tweets from the @realDonaldTrump account and the context around them—specifically how they are being received and interpreted on and off Twitter—we have permanently suspended the account due to the risk of further incitement of violence," Twitter said in a company blog post this evening.

What a bold move from Twitter to act now, a few days before Trump goes out of office. For several years, they did not act at all.