500 Chrome extensions secretly uploaded private data from millions of users

Found on Ars Technica on Friday, 14 February 2020
Browse Internet

The extensions were part of a long-running malvertising and ad-fraud scheme that was discovered by independent researcher Jamila Kaya. She and researchers from Cisco-owned Duo Security eventually identified 71 Chrome Web Store extensions that had more than 1.7 million installations.

“This was done in order to connect the browser clients to a command and control architecture, exfiltrate private browsing data without the users’ knowledge, expose the user to risk of exploit through advertising streams, and attempt to evade the Chrome Web Store’s fraud detection mechanisms.”

The discovery of more malicious and fraudulent browser extensions is a reminder that people should be cautious when installing these tools and use them only when they provide true benefit.

People should have learned by now not to install random things they find online; plugins can be just as bad as everything else.

Copyright Troll Lawsuit Over Duct Taped Banana Picture

Found on Techdirt on Thursday, 13 February 2020
Browse Legal-Issues

Back in December, it's likely you heard the wacky story about the "art installation" at the Art Basel gallery in Florida of a banana duct taped to the wall, which sold for $120,000. You may have also heard about how someone stepped in and ate the banana, but the original purchasers were still happy, despite the recognized absurdity of the whole thing.

A copyright lawsuit has been filed against the owners of the website ClickOrlando, claiming that they used a photograph of the duct taped banana taken by John Taggart without licensing it in its article about the artwork.

This entire absurdity ist just mind-blowing stupid. "Modern art" and "art installations" are only a way to launder money.

NBD: A popular HTTP-fetching npm code library used by 48,000 other modules retires

Found on The Register on Wednesday, 12 February 2020
Browse Software

After eleven months of planning, the npm-distributed request module has been deprecated, meaning the popular JavaScript code library for making HTTP requests is no longer supported and won't receive further updates.

Last March, he presented a plan to stop work on request, an Apache 2.0 licensed open source project that lists 282 contributors in its GitHub repository.

Wait until a bug is found and then we will see how many projects did not migrate.

For decades, US and Germany owned Swiss crypto company used by 120 countries

Found on Ars Technica on Tuesday, 11 February 2020
Browse Various

That unprecedented level of access allowed the US to monitor Iranian communications during the Iranian hostage crisis, Argentine communications during the Falklands War (shared with British intelligence), the communications of Egyptian President Anwar Sadat during negotiations of an Egypt-Israel peace deal at Camp David, and communications from Libya that confirmed the Qaddafi regime's involvement in a 1986 West Berlin disco bombing. During the Iran-Iraq War in the 1980s, Iranian communications were "80-90 percent readable," according to documents viewed by the Post and ZDF.

Crypto AG sold two versions of the system—one strongly encrypted for friendly governments, and one with "rigged" encryption for the rest of the world.

That's why everything related to encryption has to be open for everybody; that's also why backdoors are a bad idea.

Why we can’t develop voting software that works

Found on Infoworld on Monday, 10 February 2020
Browse Software

The uproar after the Iowa Democratic Party caucus reporting software failed was a harsh reminder for programmers of how bad things can get. Counting up a few simple votes isn’t as complicated as building an autonomous car, training an AI to recommend movies, or even updating a bank database safely, yet the programmers couldn’t pull this off. One particular damning tweet read, “Hard to believe we put men on the moon.”

The thing is that the comparison to flying to the moon isn’t really fair. Even though guiding the Apollo lander to the moon seems much harder than tabulating a few thousand votes, all of the extra work wrapped around the modern vote tally is what makes it much more complex.

Not to forget, developers get worse. Back then, they really knew what every bit they flipped did, today most just copy&paste some code they found online together and barely manage to get the different chunks working together.

France fines Apple €25 million for slowing iPhone software

Found on DW on Sunday, 09 February 2020
Browse Hardware

The crackdown comes two years after Apple admitted its iOS software slowed down the performance of older phones — in particular, devices with shorter battery life.

"This is a historic victory against scandalous ready-to-rubbish practices, for consumers as well as the environment," HOP co-founders Laetitia Vasseur and Samuel Sauvage said to AFP.

It's amazing how a company like Apple who routinely screws over customer with overpriced products is still in business.

Tesla remotely disables Autopilot on used Model S after it was sold

Found on The Verge on Saturday, 08 February 2020
Browse Technology

The company now claims that the owner of the car, who purchased it from a third-party dealer — a dealer who bought it at an auction held by Tesla itself — “did not pay” for the features and therefore is not eligible to use them.

Unbeknownst to the dealer, Tesla had independently conducted a software “audit” of the car after selling it, and disabled those features in a December update.

The value of the self-driving features that were supposed to remain active in the Model S comes out to about $8,000. Alec paid for the car under the assumption that the features were bundled into the car’s price. Tesla now says Alec has to pay the company for the features to get them re-enabled.

That sure will help to boost the acceptance of e-mobility. Not.

Iowa caucus debacle is one of the most stunning tech failures ever

Found on CNBC on Friday, 07 February 2020
Browse Politics

Iowa officials counting the results coming in Monday from the caucusing app reported irregularities that required them to switch from the app to counting votes manually. Party officials said the "underlying data" put into the app was fine, but it is unclear as of yet how they know this or even what they consider "underlying data."

The Iowa Democrats were using an application made by a partisan progressive start-up named Shadow Inc., managed by a nonprofit investment company called Acronym. In a statement, Acronym distanced itself from Shadow.

They had an app that they knew was problematic. They used it anyway without properly testing their back-up plans, each stage of which have proved to take longer than usual.

Using an untested app from a startup that calls itself Shadow, managed by Acronym. Just how stupid have those in charge been?

RIAA, Stream-Ripping Sites Engaged In Dumb Game Of Whac-A-Mole With Search Engines

Found on Techdirt on Thursday, 06 February 2020
Browse Filesharing

The focus has largely been on YouTube, where some sites have declined to play games and accepted defeat. But the RIAA is also targeting these sites to have them delisted from search engines.

Whatever you may think of the RIAA's claim that stream-ripping sites ought to be taken down, a claim that I very much disagree with, we should all certainly be able to agree that this current strategy is completely pointless.

RIAA and other similar organisations have long ago realized that they are useless these days and now they are just fighting to survive; but they will fail.

Legal action could be used to stop Starlink affecting telescope images

Found on New Scientist on Wednesday, 05 February 2020
Browse Astronomy

A group of astronomers has called for legal action to stop the launch of vast numbers of satellites designed to beam high-speed internet around the world until their impact on the night sky can be assessed.

Starlink satellites have created bright streaks in some telescope images affecting astronomical observations. Some worry that the thousands of bright points of light could alter the sky for the public and astronomers forever.

“If it is not possible to leave a better planet for future generations, we can at least try not to make it worse,” says group member Stefano Gallozzi at the Astronomical Observatory of Rome in Italy.

We don't need Internet access in every single spot all around the globe.