COP25 climate summit ends in 'staggering failure of leadership'

Found on New Scientist on Tuesday, 17 December 2019
Browse Nature

António Guterres, the UN secretary general, said he was disappointed with the outcome, and that leaders had missed an opportunity to be more ambitious on climate change mitigation, adaptation and finance for poorer countries. “But we must not give up, and I will not give up,” he tweeted.

The intransigence of big polluters – including China, the US, Brazil and India – at the meeting led to the European Union, small island states and members of the public expressing frustration.

So introduce a carbon tax. Imports from countries with high pollution rates get a serious percentage on top of the product price until they bring pollution down; the less pollution, the less tax. Sometimes compromises just won't work.

Internet of crap (encryption): IoT gear is generating easy-to-crack keys

Found on The Register on Monday, 16 December 2019
Browse Technology

The team believes that the reason for this poor entropy is down to IoT devices. Because the embedded gear is often based on very low-power hardware, the devices are unable to properly generate random numbers.

The recommendation is that IoT hardware vendors step up their security efforts to improve the entropy of these devices and make sure that their hardware is able to properly set up secure connections.

"Using a single cloud-hosted virtual machine and a well-studied algorithm, over 1 in 200 certificates using these keys can be compromised in a matter of days."

Unless the companies behind IoT devices can be held financially responsible for damages caused by weaknesses of their devices, nothing will change.

FBI Arrests Former Bank Employee Charged With Stealing Cash From Bank Vault

Found on Department of Justice on Sunday, 15 December 2019
Browse Legal-Issues

Henderson, 29, of Charlotte, is charged with financial institution fraud and related charges, for stealing more than $88,000 in cash from the vault of the bank where he was employed, and then committing a separate loan fraud in connection with the purchase of a luxury automobile.

The indictment also alleges that throughout July and August 2019, Henderson used a social media account to post several pictures of him holding large stacks of cash.

Looks like sometimes social media can be a good thing.

5G Is More Secure Than 4G and 3G—Except When It’s Not

Found on Wired on Saturday, 14 December 2019
Browse Technology

Researchers have also pointed out that some flaws in 5G allow for "downgrade" attacks in which a target's phone connection is manipulated to downgrade to 3G or 4G service, where hackers could use unresolved flaws in those older networks to carry out attacks.

The security and privacy gains of 5G will make a real difference in protecting users from manipulation and threats like tracking attacks. And as a massive horde of new internet connected devices comes online through 5G, features like network slicing will hopefully help manage their security. But there's never a magic security solution that solves every problem. And it seems likely that 5G has its own challenges on the horizon.

Or you could just not put everything online. A much bigger threat than the connectivity itself is what your apps and IoT devices send out. Compared to that, tracking by downgrading 5G is almost harmless.

KeyWe Smart Lock unauthorized access and traffic interception

Found on F-Secure on Friday, 13 December 2019
Browse Technology

The KeyWe smart lock suffers from multiple design flaws resulting in an unauthenticated - potentially malicious - actor being able to intercept and decrypt traffic coming from a legitimate user.

There are no mitigations to the issue at the time of writing. The only way, although inconvenient for the end user, is to pair a mobile device that will be as far from the device as possible and use a physical key/touchpad only.

Always remember: 99% of the products which claim to be "smart" are just really, really dumb; and useless.

Non-unicorn $700 e-scooter shop Unicorn folds with no refunds – after blowing all its cash on online ads

Found on The Register on Thursday, 12 December 2019
Browse Technology

In a savage blow to the notion of nominative determinism, e-scooter startup Unicorn is shutting down after blowing all its money on Facebook ads.

To add insult to injury, none of its 350 orders will be shipped, and the firm isn’t able to provide full refunds for the scooters it failed to deliver.

"A large portion of the revenue went toward paying for Facebook ads to bring traffic to the site."

"And as the weather continued to get colder throughout the US and more scooters from other companies came on to the market, it became harder and harder to sell Unicorns, leading to a higher cost for ads and fewer customers."

Did CEO Nick Statt really just admit that they got surprised by an unforeseeable change in weather that people just call "winter" and that this, combined with sending most money to Facebook, killed their business?

Young people can't remember how much more wildlife there used to be

Found on New Scientist on Wednesday, 11 December 2019
Browse Nature

Walking in England’s New Forest in 1892, butterfly collector S. G. Castle Russell encountered such numbers of the insects that they “were so thick that I could hardly see ahead”. On another occasion, he “captured a hundred purple hairstreaks” with two sweeps of his net.

The alternative is people losing connections to wildlife and the will to care about stopping its loss, she says. “If we don’t learn about nature from an early age, and we don’t go and experience it and recognise species, then [our collective amnesia] could just get worse and worse.”

People don't go outside as much as they used to; and when they do, it's mostly for their entertainment only with barely any attention for nature itself.

NHS gives Amazon free use of health data under Alexa advice deal

Found on The Guardian on Tuesday, 10 December 2019
Browse Various

The material, which excludes patient data, could allow the multinational technology company to make, advertise and sell its own products.

An NHS spokesperson said: “No patient data is being provided to this company by the NHS, which takes data privacy extremely seriously and has put appropriate safeguards in place to ensure information is used correctly.”

For now. First you start with a little step where you can assure that no personal data is handed over, to make people accept such a headline. In another step, you add patient data and the outcry will be small because most people will mix it up with what happened before.

Verizon reportedly blocks archivists from Yahoo Groups days before deletion

Found on Ars Technica on Monday, 09 December 2019
Browse Internet

An ad-hoc group scrambling to archive as much content as possible from Yahoo Groups ahead of the site's final demise next week is running into trouble as more than a hundred volunteer archivists say Yahoo's parent company, Verizon, has banned their accounts.

The Verizon representative said the 128 volunteers from Archiveteam.org, who joined groups with the intent of archiving them, were banned for violating the Verizon Media terms of service and would not be able to have their accounts reinstated.

The Organization for Transformative Works—the nonprofit best known for running the decade-old, Hugo-winning fanfiction site Archive of Our Own—has joined the chorus calling on Verizon to postpone the deletion date by six months, until May 14, 2020, in order to allow volunteers to archive more material.

Yahoo could do a nice PR move and just hand over the archives to the team, instead of kicking them out for trying to preserve information.

Magic Leap’s early device sales aren’t looking good

Found on Techcrunch on Sunday, 08 December 2019
Browse Technology

The Information‘s Alex Heath is reporting that Magic Leap managed to sell just 6,000 units of its $2,300 Magic Leap One headset in its first six months on sale, a figure made worse by CEO Rony Abovitz’s internal claims that he wanted the startup to sell at least one million units of the device in the first year.

The company has now raised around $2.6 billion in venture funding from firms like Google, Alibaba and a slew of other investors.

Not even $14 million earned for $2.6 billion invested. Solid business structure.