Skip to content

Welcome
Hardware
Internet
Networking
Security
Data Recovery
Duplication
Support
Contact
Webmail

Monthly Archives: February 2018

When will phishers learn that their written English needs to improve?

Category: Technology

Search for:

Recent Posts

Remember: Windows 7 is End-Of-Extended-Support in January 2020
Like backdoors? Love Cisco!
Patterns Are Good!
When will phishers learn that their written English needs to improve?
‘Very high level of confidence’ Kaspersky software responsible for NSA leaks

Slashdot

News for nerds

Crashed Boeing Planes Lacked Safety Features That Company Sold Only As Extras
by BeauHD on 22/03/2019 at 7:00 am
The recent Boeing 737 MAX crashes involving an Ethiopian Airlines flight and a Lion Air flight may have been a result of two missing safety features that Boeing charged airlines extra for (Warning: source may be paywalled; alternative source). The New York Times reports that many low-cost carriers like Indonesia's Lion Air opted not to buy them so they could save money, even though some of these systems are fundamental to the plane's operations. "Now, in the wake of the two deadly crashes involving the same jet model, Boeing will make one of those safety features standard as part of a fix to get the planes in the air again," the report says. From the report: It is not yet known what caused the crashes of Ethiopian Airlines Flight 302 on March 10 and Lion Air Flight 610 five months earlier, both after erratic takeoffs. But investigators are looking at whether a new software system added to avoid stalls in Boeing's 737 Max series may have been partly to blame. Faulty data from sensors on the Lion Air plane may have caused the system, known as MCAS, to malfunction, authorities investigating that crash suspect. The jet's software system takes readings from one of two vanelike devices called angle of attack sensors that determine how much the plane's nose is pointing up or down relative to oncoming air. When MCAS detects that the plane is pointing up at a dangerous angle, it can automatically push down the nose of the plane in an effort to prevent the plane from stalling. Boeing's optional safety features, in part, could have helped the pilots detect any erroneous readings. One of the optional upgrades, the angle of attack indicator, displays the readings of the two sensors. The other, called a disagree light, is activated if those sensors are at odds with one another. The angle of attack indicator will remain an option that airlines can buy. Neither feature was mandated by the Federal Aviation Administration. All 737 Max jets have been grounded. "Boeing will soon update the MCAS software, and will also make the disagree light standard on all new 737 Max planes," the report adds, citing a person familiar with the changes. "Boeing started moving on the software fix and the equipment change before the crash in Ethiopia." Slashdot reader Futurepower(R) adds to the story: The FBI has joined the criminal investigation into the certification of the Boeing 737 MAX, lending its considerable resources to an inquiry already being conducted by U.S. Department of Transportation agents, according to people familiar with the matter. "The federal grand jury investigation, based in Washington, D.C., is looking into the certification process that approved the safety of the new Boeing plane, two of which have crashed since October. Read more of this story at Slashdot. […]
Apple's Plan For Its New TV Service: Sell Other People's TV Services
by BeauHD on 22/03/2019 at 3:30 am
An anonymous reader quotes a report from Recode: After years of circling the TV business, Apple is finally ready to make its big splash: On Monday it will unveil its new video strategy, along with some of the new big-budget TV shows it is funding itself. One thing Apple won't do is unveil a serious competitor to Netflix, Hulu, Disney, or any other entertainment giant trying to sell streaming video subscriptions to consumers. Instead, Apple's main focus -- at least for now -- will be helping other people sell streaming video subscriptions and taking a cut of the transaction. Apple may also sell its own shows, at least as part of a bundle of other services. But for now, Apple's original shows and movies should be considered very expensive giveaways, not the core product. All of this might very well work. Apple has an installed base of 1.4 billion users, and some of them will buy the things Apple promotes: Look at the success of Apple Music, which launched seven years after Spotify but quickly amassed 50 million subscribers due to a free trial period and prominent real estate on Apple's devices. Another reason this could work: Amazon has already been very successful with its own version of the same idea. Facebook is also bullish on selling TV subscriptions and is pushing would-be partners to sign up so it can launch later this spring or summer, according to industry sources. Similarly, Comcast (which is a minority investor in Vox Media, which owns this site) is rolling out Flex, a $5-a-month service that gives you a bunch of free content (some of which you can also get other places) and the ability to easily buy HBO, Showtime, etc. Instead of offering exclusive content, Comcast is offering subscribers a Roku-like streaming box. According to people who've talked to Apple about its plans, Apple's new TV service will consist of selling TV subscription apps surrounded by millions of other apps in its main app store. "Apple plans on making a new storefront that's much more prominent for those who use Apple TV boxes and other Apple hardware," reports Recode. "It will also be able to offer its own bundles -- for instance, it could offer a package of HBO, Showtime, and Starz at a price that's lower than you'd pay for each pay TV service on its own." Read more of this story at Slashdot. […]
First Medical Device To Treat Alzheimer's Is Up For Approval By the FDA
by BeauHD on 22/03/2019 at 2:05 am
the_newsbeagle writes: An FDA advisory committee met today to consider approving the NeuroAD device, which is supposed to help with the cognitive symptoms of Alzheimer's disease. The device uses a combination of brain stimulation and cognitive training tasks to strengthen the neural circuits involved in language, memory, and other components of cognition. The treatment requires patients to come to the clinic daily for 1-hour sessions. Regulators in Israel and Europe have already approved the device. The CEO of the company behind the device, Neuronix, says that they're not attempting to cure the underlying biological causes of Alzheimer's. "We're attempting to modify the course of the disease," he says. The cognitive improvements last for up to a year, after which they fade away. Read more of this story at Slashdot. […]
750,000 Medtronic Defibrillators Vulnerable To Hacking
by BeauHD on 22/03/2019 at 1:25 am
The Homeland Security Department has issued an alert Thursday describing two types of computer-hacking vulnerabilities in 16 different models of Medtronic implantable defibrillators sold around the world, including some still on the market today. The vulnerability also affects bedside monitors that read data from the devices in patients' homes and in-office programming computers used by doctors. From the report: Medtronic recommends that patients only use bedside monitors obtained from a doctor or from Medtronic directly, and to keep it plugged in so it can receive software updates, and that they maintain "good physical control" over the monitor. Implantable defibrillators are complex, battery-run computers implanted in patients' upper chests to monitor the heart and send electric pulses or high-voltage shocks to prevent sudden cardiac death and treat abnormal heart beats. The vulnerabilities announced Thursday do not affect Medtronic pacemakers. The more serious of the two is a vulnerability that could allow improper access to data sent between a defibrillator and an external device like an at-home monitor. The system doesn't use formal authentication or authorization protections, which means an attacker with short-range access to the device could inject or modify data and change device settings, the advisory says. A second vulnerability allows an attacker to read sensitive data streaming out of the device, which could include the patient's name and past health data stored on their device. The system does not use data encryption, the advisory says. (Deploying encryption in medical devices is tricky because is increases computational complexity and therefore uses the battery faster.) The FDA isn't expected to issue a recall as the vulnerabilities are expected to be patched via a future software update. Read more of this story at Slashdot. […]
Microsoft Boots Up the First 'DNA Drive' For Storing Data
by BeauHD on 22/03/2019 at 12:45 am
Since 2016, Microsoft has been working with the University of Washington to develop the first device to automatically encode digital information into DNA and back to bits again. "So far, DNA storage has been carried out by hand in the lab," reports MIT Technology Review. But now Microsoft and researchers at the University of Washington "say they created a machine that converts electronic bits to DNA and back without a person involved." From the report: The gadget, made from about $10,000 in parts, uses glass bottles of chemicals to build DNA strands, and a tiny sequencing machine from Oxford Nanopore to read them out again. According to a publication on March 21 in the journal Nature Scientific Reports, the team was able to store and retrieve just a single word -- "hello" -- or five bytes of data. What's more, the process took 21 hours, mostly because of the slow chemical reactions involved in writing DNA. While the team considered that a success for their prototype, a commercially useful DNA storage system would have to store data millions of times faster. Read more of this story at Slashdot. […]
The Majority of Scooters in LA Are Going To Share Your Location With the City
by msmash on 22/03/2019 at 12:01 am
Los Angeles is pumping the brakes on scooter companies that won't tell it what part of the city you're wheeling around. From a report: Last September, the Los Angeles Department of Transportation said it would require all scooter companies to provide real-time location data on the vehicles to help with city planning purposes. The data is collected by GPS on the scooters. The requirement raised privacy concerns because sensitive data would be handled by the city government. The government partners with data aggregators, like Remix, to analyze that information. Privacy advocacy groups, including the Electronic Frontier Foundation and the Center for Technology and Democracy, have publicly spoken out about these data requests. It still isn't clear how long LADOT retains the location data, and there aren't public details on what aggregators can do with that information. What is clear: Companies that don't share the data won't be allowed to put as many scooters on the streets as those that do. Companies that declined to provide the data were given a 30-day provisional permit to operate in LA, which were handed out last week, while those that agreed to hand over anonymized location data received permits for a full year. Read more of this story at Slashdot. […]

Archives

August 2018
July 2018
April 2018
February 2018
January 2018
December 2017
October 2017
September 2017
August 2016
July 2016
March 2016
February 2016
August 2015
May 2015

Categories

Innovation
Security
Software
Technology

Tags

backdoor cisco coding json laziness patterns public information announcement security vulnerability

© 2017 IT Sales & Services Ltd

Quality IT solutions in Tanzania since 2010