The Catch-22 that broke the Internet

Found on Ars Technica on Monday, 10 June 2019
Browse Internet

The disruptions all stemmed from Google Cloud, which suffered a prolonged outage—an outage which also prevented Google engineers from pushing a fix. And so, for an entire afternoon and into the night, the Internet was stuck in a crippling ouroboros: Google couldn’t fix its cloud, because Google’s cloud was broken.

Google says its engineers were aware of the problem within two minutes. And yet! “Debugging the problem was significantly hampered by failure of tools competing over use of the now-congested network,” the company wrote in a detailed postmortem.

A friendly reminder that everything can and will go down. "The cloud" is in no way special there; it makes it just more spectacular by affecting way more people.

More Trouble for Huawei: No More Facebook on New Phones

Found on Wired on Sunday, 09 June 2019
Browse Various

Facebook will reportedly no longer allow the Chinese telecom giant to preinstall Facebook, WhatsApp, and Instagram apps on its devices.

Facebook's decision is the latest fallout from the US government's decision last month to add Huawei to a list of companies that, due to national security concerns, must get permission to buy US-made technology, including software.

That sounds more like a unique selling point instead of trouble.

Doctor Who writer axed over transgender tweets

Found on BBC News on Saturday, 08 June 2019
Browse Censorship

Writer Gareth Roberts has been dropped from an upcoming Doctor Who anthology over "offensive" transphobic tweets, BBC Books has confirmed.

"It is impossible for a person to change their biological sex. I don't believe anybody is born in the wrong body," he said.

Ebury's decision to drop Roberts over his tweets, which it says conflicts with its "values as a publisher", has sparked debate on social media.

So, personal opinions are only allowed if they do not hurt the feelings of even minorities. That will be a fad and boring world.

Who left a database of emails, credit cards, plain-text passwords, and more open to the web this week?

Found on The Register on Friday, 07 June 2019
Browse Various

IT gear distributor Tech Data is the latest company to expose an insecure database, jam packed with personal and sensitive information, to the public internet for anyone to rifle through.

Within that database, we're told, was a 264GB cache of information including emails, payment and credit card details, and unencrypted usernames and passwords. Pretty much everything you need to ruin someone's day (or year).

In addition to the login credentials and card information, the researchers said they were able to find private API keys and logs in the database, as well as customer profiles that included full names, job titles, phone numbers, and email and postal addresses.

CC details and plaintext passwords, really now? Haven't any of the similar "accidents" taught the big companies that such information has to be handled in a better way?

238 Google Play apps with >440 million installs made phones nearly unusable

Found on Ars Technica on Thursday, 06 June 2019
Browse Software

Carefully concealed adware installed in Google-approved apps with more than 440 million installations was so aggressive that it rendered mobile devices nearly unusable, researchers from mobile security provider Lookout said Tuesday.

Once installed, the apps initially behaved normally. Then, after a delay of anywhere between 24 hours and 14 days, the obfuscated BeiTaAd plugin would begin delivering what are known as out-of-app ads. These ads appeared on users' lock screens and triggered audio and video at seemingly random times or even when a phone was asleep.

There's no indication that CooTek will be banned or otherwise punished for breaching Play terms of service on such a mass scale and for taking the steps it did to hide the violation.

Remember, back in the days, where marketing folks told everybody who wanted to hear (and those who didn't too) that walled gardens appstores are a perfect way to keep malware away?

Zuckerberg classmate launches attack in front of MPs

Found on CNet News on Tuesday, 04 June 2019
Browse Various

Mr Greenspan told MPs he had developed a portal for students, to unite various campuses at Harvard, called houseSYSTEM but also referred to as The Facebook, in 2003.

Damian Collins, who chairs the committee, has frequently called on Mr Zuckerberg to come to Parliament to answer questions about how Facebook operates - but he has refused.

To the sub-committee, he described Facebook as a "black box", claiming advertisers were "in the dark" about how effective their campaigns on the platform were and how many real users they were actually reaching.

It's good to see that Facebook is steadily going downhill. People start to realize hat it is nothing but a nightmare; and younger users are not even bothering anymore with it.

Quest Diagnostics Says Up to 12 Million Patients May Have Had Personal Information Breached

Found on NBC New York on Tuesday, 04 June 2019
Browse Various

"(The) information on AMCA’s affected system included financial information (e.g., credit card numbers and bank account information), medical information and other personal information (e.g., Social Security Numbers)," Quest said in the filing.

"Quest Diagnostics takes this matter very seriously and is committed to the privacy and security of patients’ personal, medical and financial information," the company added in the filing.

As long as companies will continue to store vast amounts of this data, it will leak; and with every leak, it will get less and less interesting, until nobody cares anymore.

Google recovers from outage that took down YouTube, Gmail, and Snapchat

Found on The Verge on Monday, 03 June 2019
Browse Internet

The root cause was issues with Google’s Cloud service that powers apps other than just Google’s own web services.

Discord, Snapchat, and Vimeo users are also affected, as these all use Google Cloud on the backend.

The problems for YouTube follow high profile outages for the popular video service in January and October.

Just a friendly reminder for those who think "cloud" means "always working".

Facebook reportedly thinks there's no 'expectation of privacy' on social media

Found on CNet News on Sunday, 02 June 2019
Browse Internet

"There is no invasion of privacy at all, because there is no privacy," Facebook counsel Orin Snyder said during a pretrial hearing to dismiss a lawsuit stemming from the Cambridge Analytica scandal, according to Law 360.

The company reportedly didn't deny that third parties accessed users' data, but it instead told US District Judge Vince Chhabria that there's no "reasonable expectation of privacy" on Facebook or any other social media site.

There is privacy even on social media if the control of all available data is under the control of the user only. Obviously, that would make it impossible for a company to harvest and analyze and sell everything about their sheep users, so it's harder to make money. Snyder should have said "There is no privacy on Facebook because of our business model".

DigitalOcean drowned my startup! 'We lost everything, our servers, and one year of database backups' says biz boss

Found on The Register on Saturday, 01 June 2019
Browse Various

Beauvais, in a series of Twitter posts, describes sending multiple emails and Twitter direct messages to DigitalOcean and regaining access after 12 hours of downtime.

"We lost everything, our servers, and more importantly one year of database backups," Beauvais lamented. "We now have to explain to our clients, Fortune 500 companies why we can’t restore their account."

DigitalOcean has promised a public postmortem once it completes an investigation of the incident.

In the past, you made off-shore backups to a different DC, owned by a different provider. In case your company was important enough to do business with Fortune 500 companies, you had hot-standby systems ready for the worst case. That allowed you to switch in case of problems, and it kept all your business critical data accessible.
Today, you throw all these safety steps away and jus cry on Twitter when things blow up. Now let's sit back and wait for the next social media ruckus when Digital Ocean will not shut down a real malicious scipt.