An anonymous reader writes Documents leaked by NSA whistleblower Edward Snowden to the Canadian Broadcasting Corporation and The Intercept show the extent to which Communications Security Establishment Canada (CSEC) cooperates with the NSA — and perhaps most interestingly details CSEC's "false flag" operations, whereby cyberattacks are designed and carried out with the intention of attribution to another individual, group or nation state. The revelations come in the midst of Canadian controversy regarding the C-51 anti-terrorism bill.

Bismillah writes Cisco has confirmed that its SPA300 and SPA500 are vulnerable to remote eavesdropping and dialing, and is working on a patch. Meanwhile, the advice is not to have the phones on internet-facing connections. From the article: "Cisco has confirmed the issue reported by Watts, which is a result of wrong authentication settings in the default configuration of firmware version 7.5.5. An attacker can send a specially crafted Extended Markup Language (XML) request to devices which will allow them to both make phone calls remotely, and listen in on audio streams. Successful exploits could be used to conduct further attacks, Cisco warned. Despite the confirmed vulnerability, Cisco said the flaw was unlikely to be used and gave it a low 'harassment' severity rating."

An anonymous reader writes with news about an impressive renewable energy accomplishment in Costa Rica. Costa Rica has achieved a clean energy milestone by using 100 per cent renewable energy for a record 75 days in a row. The feat was achieved thanks to heavy rainfall, which powered four hydroelectric plants in the first three months of the year, the state-run Costa Rican Electricity Institute said. No fossil fuels have been burnt to generate electricity since December 2014, in the state which is renowned for its clean energy policies."

An anonymous reader writes Recently, Techdirt noted that the FBI may soon have permission to break into computers anywhere on the planet. It will come as no surprise to learn that the U.S.'s partner in crime, the UK, granted similar powers to its own intelligence services some time back. What's more unexpected is that it has now publicly said as much, as Privacy International explains: "The British Government has admitted its intelligence services have the broad power to hack into personal phones, computers, and communications networks, and claims they are legally justified to hack anyone, anywhere in the world, even if the target is not a threat to national security nor suspected of any crime." That important admission was made in what the UK government calls its "Open Response" to court cases started last year against GCHQ.

Mark Wilson writes Two minutes is all it takes to completely destroy a computer. In a presentation entitled 'How many million BIOSes would you like to infect?' at security conference CanSecWest, security researchers Corey Kallenberg and Xeno Kovah revealed that even an unskilled person could use an implant called LightEater to infect a vulnerable system in mere moments. The attack could be used to render a computer unusable, but it could also be used to steal passwords and intercept encrypted data. The problem affects motherboards from companies including Gigabyte, Acer, MSI, HP and Asus. It is exacerbated by manufactures reusing code across multiple UEFI BIOSes and places home users, businesses and governments at risk.

As reported by News.com.au, the city of Paris has implemented a harsh (but temporary) measure for drivers, in response to a surge in pollution: banning cars with even-numbered registration plates from the streets. According to the article, City mayor Anne Hidalgo had asked authorities to prevent one in every two cars from taking to the capital’s streets and make all public transport temporarily free in a bid to drive down pollution. Only vehicles with numberplates ending in an odd number will be allowed to drive, though exceptions exist for vehicles like taxis, electric cars and ambulances. ... Public transportation is to be free until at least Monday in Paris and its surrounding towns in an effort to force pollution down by coaxing drivers to give up their cars for a few days. Similar emergency measures were last implemented almost exactly a year ago — on March 17 — during a particularly bad spike in the pollution levels.

jones_supa writes: Hardware that sports the "Designed for Windows 8" logo requires machines to support UEFI Secure Boot. When the feature is enabled, the core software components used to boot the machine are verified for correct cryptographic signatures, or the system refuses to boot. This is a desirable security feature, because it protects from malware sneaking into the boot process. However, it has an issue for alternative operating systems, because it's likely they won't have a signature that Secure Boot will authorize. No worries, because Microsoft also mandated that every system must have a UEFI configuration setting to turn the protection off, allowing booting other operating systems. This situation may now change. At its WinHEC hardware conference in Shenzhen, China, Microsoft said the setting to allow Secure Boot to be turned off will become optional when Windows 10 arrives. Hardware can be "Designed for Windows 10," and offer no way to opt out of the Secure Boot lock down. The choice to provide the setting (or not) will be up to the original equipment manufacturer.

HughPickens.com writes CNN reports that when asked how to offset the influence of big money in politics, President Barack Obama suggested it's time to make voting a requirement. "Other countries have mandatory voting," said Obama "It would be transformative if everybody voted — that would counteract money more than anything," he said, adding it was the first time he had shared the idea publicly. "The people who tend not to vote are young, they're lower income, they're skewed more heavily towards immigrant groups and minority groups. There's a reason why some folks try to keep them away from the polls." At least 26 countries have compulsory voting, according to the Institute for Democracy and Electoral Assistance. Failure to vote is punishable by a fine in countries such as Australia and Belgium; if you fail to pay your fine in Belgium, you could go to prison. Less than 37% of eligible voters actually voted in the 2014 midterm elections, according to The Pew Charitable Trusts. That means about 144 million Americans — more than the population of Russia — skipped out. Critics of mandatory voting have questioned the practicality of passing and enforcing such a requirement; others say that freedom also means the freedom not to do something.

New submitter boll writes A bunch of Star Citizen alumns have taken it upon themselves to resurrect the hit game franchise Descent, backed by a Kickstarter campaign. If you are a semi-oldtimer on the PC gaming scene, you may fondly remember how the original Descent was among the first to provide 6 genuine degrees of freedom during intense late night LAN gaming sessions." Reader elfindreams adds: It will be released as a PC/Mac/Linux game and will include a single player campaign and multiplayer with up to 64 combatants on a map! They are working with a number of members of the current D1/D2 community to make sure the flight/gameplay feels "old school" and they are updating the technology and game to a new generation.

Lucas123 (935744) writes During a discussion at a Nvidia conference, Elon Musk predicted that in the future, consumers will not be allowed to drive cars because it will be considered too dangerous. [Note: compare Lyft CEO Logan Green's opposite view] 'You can't have a person driving a two-ton death machine,' he said. Others agree. Thilo Koslowski, a vice president at Gartner, said instead of laws dictating drivers must cede control to their car's computer, we may someday someday just pass signs requiring drivers to activate auto-drive functionality for certain particularly treacherous stretches of roadway. Kowlowski said fully autonomous vehicles won't be ubiquitous for another 10 to 15 years, but the government could spur that on by offering tax incentives as it does today with all-electric vehicles and hybrids. Related news: it may not be fully autonomous driving, but Tesla S drivers are promised an upgrade a few months from now that gives a taste, with the addition of automatic steering features. And though it's perhaps anti-climactic as a solution to "ending range anxiety," Musk also announced today that Teslas will get in the next two weeks a software upgrade that will greatly upgrade the cars' routing software, integrating "near-realtime" lists of available supercharger stations, and keeping drivers apprised of whether one is within range.

Nerval's Lobster writes For the past ten years, developers and tech pros have made a game of comparing MySQL and PostgreSQL, with the latter seen by many as technically superior. Those who support PostgreSQL argue that its standards support and ACID compliance outweighs MySQL's speed. But MySQL remains popular thanks to its inclusion in every Linux Web hosting package, meaning that a mind-boggling number of Web developers have used it. In a new article, developer David Bolton compares MySQL/MariaDB 5.7.6 (released March 9, 2015) with PostgreSQL 9.4.1 and thinks the latter remains superior on several fronts, including subqueries, JSON support, and better licensing and data integrity: "I think MySQL has done a great job of improving itself to keep relevant, but I have to confess to favoring PostgreSQL."