German Payments Group Wirecard Says $2.1 Billion of Cash is Missing

Found on Slashdot on Tuesday, 23 June 2020
Browse Legal-Issues

The company was told by EY that there were indications a trustee of Wirecard bank accounts had attempted "to deceive the auditor" and that "spurious cash balances" might have been provided to EY by a third party.

Investors' enthusiasm for the company, whose aggressive expansion was masterminded by Markus Braun, its chief executive and largest shareholder, catapulted it into Germany's prestigious Dax 30 index two years ago with a market value of $27 billion. It slumped to less than $5.6 billion on Thursday as its shares plunged almost 70%

That's a little more than just an "accident".

Adobe Flash Is Actually Going to Die This Time, For Real

Found on Gizmodo on Monday, 22 June 2020
Browse Software

Three years ago, long after the rise (and fall) of Flash, Adobe announced that its once-ubiquitous multimedia platform was finally going away. But Adobe never provided a specific date for when Flash would reach its end-of-life. Now we know: Adobe Flash is going to officially die on December 31, 2020.

For a software platform that lasted more than two decades and played a huge part in the Dot-com bubble of the late 90s and early 2000s, Flash lasted a lot longer than most people probably ever expected.

Also, Flash was one of the worst pieces of software from a security point of view. It should have vanished a decade ago.

Businesswoman's computer hacking revenge 'ruined' firm

Found on The York Press on Sunday, 21 June 2020
Browse Legal-Issues

Outside court, police said the victim had told them her actions had led to the company collapsing and job losses.

Detective Constable Steven Harris, of North Yorkshire Police’s Cyber Crime Unit, said: “During our investigation, it became clear that Bulley had left the original company on a bad note, but the deletion of thousands of files containing vital information was catastrophic for the victim.

Not to sound rude, but that's exactly what backups are for. If your entire company relies on the uptime of a Dropbox account, you're out of business sooner or later.

Have we become too reliant on Big Tech firms?

Found on BBC News on Saturday, 20 June 2020
Browse Various

It's not just Amazon that has been used more during the pandemic. Apple and Android smartphones and tablets, Facebook's apps and Microsoft tools have provided crucial links with friends, family and colleagues.

Before the pandemic, there had been scrutiny on Big Tech. The US House Judiciary antitrust subcommittee sent requests for information to Amazon, Apple, Google owner Alphabet and Facebook in September 2019, with the government concerned that only a small number of companies hold such a big share of the digital market.

People are too reliant on them for years already. Worse, people know that they are basically abused in exchange for services that work like drugs.

To evade detection, hackers are requiring targets to complete CAPTCHAs

Found on Ars Technica on Friday, 19 June 2020
Browse Internet

Microsoft recently spotted an attack group distributing a malicious Excel document on a site requiring users to complete a CAPTCHA, most likely in an attempt to thwart automated detection by good guys.

Periodically changing up attack routines is one way attackers stay ahead of defenders, creating a never-ending back-and-forth process that requires constant vigilance for defenders to stay on top of. It’s likely the attack group will change course again in the coming months.

Captchas are bad enough already. If someone mails you anything that brings up a captcha, ignore it. Even if it is legit.

Hacker Bypasses GE's Ridiculous Refrigerator DRM

Found on Vice on Thursday, 18 June 2020
Browse Technology

Earlier this year, we brought you the sordid tale of the GE refrigerator that won’t dispense filtered water unless consumers pay extra for “official” filters from the company.

For reference, third-party filters cost as little as $13; GE filters cost $55. I’m gonna go ahead and call this a “hack,” because they’re bypassing an artificial software lock to circumvent DRM, which is, at least in spirit, a hack, and a cool one at that.

Why would you even buy a fridge that locks you down to overpriced replacement parts?

Coronavirus second waves emerge in several US states as they reopen

Found on New Scientist on Wednesday, 17 June 2020
Browse Various

More than a dozen US states have seen a surge in covid-19 cases in recent weeks. Many of them, including Arizona, North Carolina, Oregon and Florida, are experiencing spikes in confirmed cases as they lift stay-at-home orders – so is reopening to blame? Yes, among other factors, say experts.

What a surprise! Not.

Google is messing with the address bar again—new experiment hides URL path

Found on Ars Technica on Tuesday, 16 June 2020
Browse Internet

As spotted by Android Police, new flags in the developer versions of the popular browser now want to hide the URL path. So for an article like this one, instead of "https://arstechnica.com/gadgets/2020/06/google-is-messing-with-the-address-bar-again-new-experiment-hides-url-path/," the address bar would show "arstechnica.com."

It's unknown what Google's plans are for the experiment, but hiding more URL information would line up with Chrome's previous actions. For years the Chrome team has wanted to kill the URL bar, arguing that it's a confusing way to express Web identity. While Google hasn't outright killed the bar yet, Chrome has made numerous changes to try to "simplify" the URL bar. Currently, Chrome hides URL protocol if it is HTTP or HTTPS.

Can we please stop dumbing down users? For decades now, seeing the URL has confused nobody, but now Google thinks it is too complex. The full URL is an important information, and messing with that is flat out a stupid idea.

Whatsapp blamed own users for failure to keep phone number repo off Google searches

Found on The Register on Monday, 15 June 2020
Browse Internet

Athul Jayaram, a self-described “full time bug bounty hunter”, published a blog post earlier this week highlighting that a large number of Whatsapp users’ mobile numbers could easily be found by searching Google for the domain “wa.me”.

Whatsapp has suffered from security and privacy problems in the recent past – some big, some less so, and some downright scary. Facebook, its owner, makes a big deal out of its security features including end-to-end encryption. Technical security is no good if you’re going to let the world’s biggest search engine, run by the world’s biggest advertising technology company, hoover up your users’ phone numbers by exposing them in plaintext on one of your websites.

A good question is if this is a GDPR violation.

Facebook Pitched New Tool Allowing Employers to Suppress Words Like “Unionize”

Found on The Intercept on Sunday, 14 June 2020
Browse Internet

The presentation discussed the “benefits” of “content control.” And it offered one example of a topic employers might find it useful to blacklist: the word “unionize.”

The suggestion that Facebook is actively building tools designed to suppress labor organizing quickly caused a stir at the Menlo Park, California-based company. Facebook employees sparked a flurry of posts denouncing the feature, with several commenting in disbelief that the company would overtly pitch “unionize” as a topic to be blacklisted.

It's painful to watch how slow people start to realize how bad Facebook really is.