Posts

Slashdot: Researcher Publishers 7 Million (Still Public) Venmo Transactions on GitHub

Image
Researcher Publishers 7 Million (Still Public) Venmo Transactions on GitHub Published on June 17, 2019 at 03:14AM Remember the outrage last year when a researcher discovered that for Venmo's 40 million users, all transactions are "public" by default and broadcast on Venmo's API? More than a year later, computer science student Dan Salmon has demonstrated that it's still incredibly easy to download millions of transactions through Venmo's developer API without obtaining user permissions (without even using the Venmo app). He proved this by downloading 7 million of them," TechCrunch reports: Dan Salmon said he scraped the transactions during a cumulative six months to raise awareness and warn users to set their Venmo payments to private... Using that data, anyone can look at an entire user's public transaction history, who they shared money with, when, and in some cases for what reason -- including illicit goods and substances. "There's truly n...

Slashdot: 'Genius' Site Said It Used Morse Code To Catch Google Stealing Song Lyrics

Image
'Genius' Site Said It Used Morse Code To Catch Google Stealing Song Lyrics Published on June 17, 2019 at 02:24AM "Genius.com says its traffic is dropping because, for the past several years, Google has been publishing lyrics on its own platform, with some of them lifted directly from the music site," reports the Wall Street Journal: Google denies doing anything nefarious. Still, Genius's complaints offer a window into the challenges small tech companies can face when the unit of Alphabet Inc. starts offering competing services on its platform... Genius said it notified Google as far back as 2017, and again in an April letter, that copied transcriptions appear on Google's website. The April letter, a copy of which was viewed by the Journal, warned that reuse of Genius's transcriptions breaks the Genius.com terms of service and violates antitrust law. "Over the last two years, we've shown Google irrefutable evidence again and again that they are dis...

Slashdot: Google's Login Chief: Apple's Sign-In Button Is Better Than Using Passwords

Image
Google's Login Chief: Apple's Sign-In Button Is Better Than Using Passwords Published on June 17, 2019 at 01:04AM After Apple announced a single sign-on tool last week, The Verge interviewed Google product management director Mark Risher. Though Google offers its own single sign-on tool, The Verge found him "surprisingly sunny about having a new button to compete with. While the login buttons are relatively simple, they're much more resistant to common attacks like phishing, making them much stronger than the average password -- provided you trust the network offering them." RISHER: I honestly do think this technology will be better for the internet and will make people much, much safer. Even if they're clicking our competitor's button when they're logging into sites, that's still way better than typing in a bespoke username and password, or more commonly, a recycled username and password... Usually with passwords they recommend the capital letters...

Slashdot: Michigan Town Approves Fiber Internet Despite Intense Lobbying

Image
Michigan Town Approves Fiber Internet Despite Intense Lobbying Published on June 17, 2019 at 12:04AM Long-time Slashdot reader Proudrooster writes: Fiber Internet is coming to Traverse City, Michigan in the hopes of attracting high tech startups and helping the city become a high-tech hub. Even in the face of intense lobbying by [commercial high-speed internet provider] Charter, The Mackinaw Center for Public Policy, and a barrage of pop up ads opposing it, the project is moving ahead into phase one. It was more than apparent that Charter did everything it could to try and sow fear, uncertainty, and doubt to try and kill this project as other incumbent providers have done across the USA. [Citation needed -- though Traverse City officials did report high-powered anonymous lobbying.] Kudos to the board of Traverse City Light and Power and the residents of Traverse City for being brave and making this investment in their community. Even though the decision is not finalized, the network ma...

Slashdot: America Planted Malware In Russia's Power Grid, Says NYT

Image
America Planted Malware In Russia's Power Grid, Says NYT Published on June 16, 2019 at 11:04PM "The U.S. military's Cyber Command has gotten more aggressive than ever against Russia in the past year, placing 'potentially crippling malware' in systems that control the country's electrical grid," according to CNET, citing a report in the New York Times: Made possible by little-noticed legal authority granted last summer by Congress, Cyber Command's strategy shift from a defensive to offensive posture is meant in part as a warning shot, but it's also designed to enable paralysing cyberattacks in the event of a conflict, The New York Times said Saturday, quoting unnamed officials... [T]he recent moves appear to have taken place under a military authorization bill Congress passed in 2018 that gives the go-ahead for "clandestine military activity" in cyberspace to "deter, safeguard or defend against attacks or malicious cyberactivities aga...

Slashdot: Why 'Ambient Computing' Is Just A Marketing Buzzword -- For Now

Image
Why 'Ambient Computing' Is Just A Marketing Buzzword -- For Now Published on June 16, 2019 at 10:04PM An anonymous reader quotes Computerworld columnist Mike Elgan: Ambient computing is real. It's the next megatrend in computing.... To interact in an "ambient computing" context means to not care and not even necessarily know where exactly the devices are that you're interacting with. When IoT devices and sensors are all around us, and artificial intelligence can understand human contexts for what's happening and act accordingly and in our interests, then ambient computing will have arrived... As with many technology revolutions, including augmented reality and AI, the buzzword ambient will precede the actual technology by many years. In fact, the marketing buzzword is suddenly here in full force. The actual technologies? Not so much. Instead, we're on the brink of a revolution in what you might call "semi-ambient computing...." Rumors are cir...

Slashdot: Massive Electrical Failure Cuts Power To Nearly All Of Argentina On Election Day -- and Uruguay

Image
Massive Electrical Failure Cuts Power To Nearly All Of Argentina On Election Day -- and Uruguay Published on June 16, 2019 at 09:04PM Iwastheone quotes the BBC: A massive electrical failure has left almost all of Argentina and Uruguay without power, according to a major Argentine electricity provider. Authorities say the cause of the blackout is still unclear. Argentine media said the power cut occurred shortly after 07:00 [03:00 PST, 11:00 BST], causing trains to be halted and failures with traffic signalling. It came as people in parts of Argentina were preparing to go to the polls for local elections. "A massive failure in the electrical interconnection system left all of Argentina and Uruguay without power," electricity supply company Edesur said in a tweet. Alejandra Martinez, a spokeswoman for the company, described the power cut as unprecedented. "This is the first time something like this has happened across the entire country." Argentina's energy secret...