COP25 climate summit ends in 'staggering failure of leadership'
António Guterres, the UN secretary general, said he was disappointed with the outcome, and that leaders had missed an opportunity to be more ambitious on climate change mitigation, adaptation and finance for poorer countries. “But we must not give up, and I will not give up,” he tweeted.
The intransigence of big polluters – including China, the US, Brazil and India – at the meeting led to the European Union, small island states and members of the public expressing frustration.
Internet of crap (encryption): IoT gear is generating easy-to-crack keys
The team believes that the reason for this poor entropy is down to IoT devices. Because the embedded gear is often based on very low-power hardware, the devices are unable to properly generate random numbers.
The recommendation is that IoT hardware vendors step up their security efforts to improve the entropy of these devices and make sure that their hardware is able to properly set up secure connections.
"Using a single cloud-hosted virtual machine and a well-studied algorithm, over 1 in 200 certificates using these keys can be compromised in a matter of days."
FBI Arrests Former Bank Employee Charged With Stealing Cash From Bank Vault
Henderson, 29, of Charlotte, is charged with financial institution fraud and related charges, for stealing more than $88,000 in cash from the vault of the bank where he was employed, and then committing a separate loan fraud in connection with the purchase of a luxury automobile.
The indictment also alleges that throughout July and August 2019, Henderson used a social media account to post several pictures of him holding large stacks of cash.
5G Is More Secure Than 4G and 3G—Except When It’s Not
Researchers have also pointed out that some flaws in 5G allow for "downgrade" attacks in which a target's phone connection is manipulated to downgrade to 3G or 4G service, where hackers could use unresolved flaws in those older networks to carry out attacks.
The security and privacy gains of 5G will make a real difference in protecting users from manipulation and threats like tracking attacks. And as a massive horde of new internet connected devices comes online through 5G, features like network slicing will hopefully help manage their security. But there's never a magic security solution that solves every problem. And it seems likely that 5G has its own challenges on the horizon.
KeyWe Smart Lock unauthorized access and traffic interception
The KeyWe smart lock suffers from multiple design flaws resulting in an unauthenticated - potentially malicious - actor being able to intercept and decrypt traffic coming from a legitimate user.
There are no mitigations to the issue at the time of writing. The only way, although inconvenient for the end user, is to pair a mobile device that will be as far from the device as possible and use a physical key/touchpad only.
Non-unicorn $700 e-scooter shop Unicorn folds with no refunds – after blowing all its cash on online ads
In a savage blow to the notion of nominative determinism, e-scooter startup Unicorn is shutting down after blowing all its money on Facebook ads.
To add insult to injury, none of its 350 orders will be shipped, and the firm isn’t able to provide full refunds for the scooters it failed to deliver.
"A large portion of the revenue went toward paying for Facebook ads to bring traffic to the site."
"And as the weather continued to get colder throughout the US and more scooters from other companies came on to the market, it became harder and harder to sell Unicorns, leading to a higher cost for ads and fewer customers."
Young people can't remember how much more wildlife there used to be
Walking in England’s New Forest in 1892, butterfly collector S. G. Castle Russell encountered such numbers of the insects that they “were so thick that I could hardly see ahead”. On another occasion, he “captured a hundred purple hairstreaks” with two sweeps of his net.
The alternative is people losing connections to wildlife and the will to care about stopping its loss, she says. “If we don’t learn about nature from an early age, and we don’t go and experience it and recognise species, then [our collective amnesia] could just get worse and worse.”
NHS gives Amazon free use of health data under Alexa advice deal
The material, which excludes patient data, could allow the multinational technology company to make, advertise and sell its own products.
An NHS spokesperson said: “No patient data is being provided to this company by the NHS, which takes data privacy extremely seriously and has put appropriate safeguards in place to ensure information is used correctly.”
Verizon reportedly blocks archivists from Yahoo Groups days before deletion
An ad-hoc group scrambling to archive as much content as possible from Yahoo Groups ahead of the site's final demise next week is running into trouble as more than a hundred volunteer archivists say Yahoo's parent company, Verizon, has banned their accounts.
The Verizon representative said the 128 volunteers from Archiveteam.org, who joined groups with the intent of archiving them, were banned for violating the Verizon Media terms of service and would not be able to have their accounts reinstated.
The Organization for Transformative Works—the nonprofit best known for running the decade-old, Hugo-winning fanfiction site Archive of Our Own—has joined the chorus calling on Verizon to postpone the deletion date by six months, until May 14, 2020, in order to allow volunteers to archive more material.
Magic Leap’s early device sales aren’t looking good
The Information‘s Alex Heath is reporting that Magic Leap managed to sell just 6,000 units of its $2,300 Magic Leap One headset in its first six months on sale, a figure made worse by CEO Rony Abovitz’s internal claims that he wanted the startup to sell at least one million units of the device in the first year.
The company has now raised around $2.6 billion in venture funding from firms like Google, Alibaba and a slew of other investors.