×
Security

Cybercriminals Are Doing Their Homework in Latest Banking Scam (theregister.com)

A new social engineering scam is making the rounds, and this one is particularly insidious: It tricks users into sending money to what they think is their own account to reverse a fraudulent charge. From a report: The FBI's Internet Crime Complaint Center issued the warning, which it said involves cybercriminals who have definitely done their homework. "In addition to knowing the victim's financial institution, the actors often had further information such as the victim's past addresses, social security number, and the last four digits of their bank accounts," the IC3 said.

The con starts off as many that target individuals do nowadays: With a text message. In this case it's not a phishing attempt, it's an attempt to ascertain whether the person receiving the message is susceptible to further manipulation. Posing as the target's bank, the message asks whether a large charge ($5,000 in the example the FBI gives) was legitimate and asks for a reply of YES or NO. Replying no leads to a follow-up text: "Our fraud specialist will be contacting you shortly. This is where social engineering comes in, and the FBI is painting a picture of a sophisticated operation. The "fraud specialists" contacting users reportedly "speak English without a discernible accent," and once they establish credibility with the victim they move on to "helping" them "reverse" the fake transaction.

It gets even more insidious here: The charges that are being refuted aren't bank charges directly: they are payments being made through an instant payment app like Venmo or CashApp. The fraudster never asks for a password or any information that might clue someone in that they're being strung along. Instead, the caller asks the victim to use their bank website or app to remove their email address from the digital payment app (thereby unlinking the app and bank account), which the fraudster then asks for. Next, the victim is asked to send the same amount as the fake payment to themselves using their own email address, which has already been added to an account the criminal controls.

Chrome

Google Issues Third Emergency Fix for Chrome This Year (theregister.com) 10

Google is issuing fixes for two vulnerabilities in its Chrome web browser, including one flaw that is already being exploited in the wild. From a report: The emergency updates the company issued this week impact the almost 3 billion users of its Chrome browser as well as those using other Chromium-based browsers, such as Microsoft Edge, Brave and Vivaldi. It is the third such emergency update Google has had to issue for Chrome this year. One of the flaws is a type confusion vulnerability tracked as CVE-2022-1364, a high-severity, zero-day bug that is actively being used by attackers. With a type confusion flaw, a program will allocate a resource like a pointer or object using one type but later will access the resource using another, incompatible type. In some languages, like C and C++, the vulnerability can result in out-of-bounds memory access. This incompatibility can cause a browser to crash or trigger logical errors. However, if exploited, it could enable a hacker to execute arbitrary code.
Desktops (Apple)

Apple Readies Several New Macs With Next-Generation M2 Chips (bloomberg.com) 14

Apple has started widespread internal testing of several new Mac models with next-generation M2 chips, according to developer logs, part of its push to make more powerful computers using homegrown processors. Bloomberg: The company is testing at least nine new Macs with four different M2-based chips -- the successors to the current M1 line -- with third-party apps in its App Store, according to the logs, which were corroborated by people familiar with the matter. The move is a key step in the development process, suggesting that the new machines may be nearing release in the coming months. The M2 chip is Apple's latest attempt to push the boundaries of computer processing after a split with Intel in recent years. Apple has gradually replaced Intel chips with its own silicon, and now looks to make further gains with a more advanced line. After years of slow growth, the Mac computer division enjoyed a resurgence the past two years, helped in part by home office workers buying new equipment. The business generated $35.2 billion in sales the past fiscal year, about 10% of Apple's total.
United States

IRS Investigating American Express Sales Pitches (wsj.com) 2

The Internal Revenue Service is investigating American Express over a questionable tax break that it pitched to clients, WSJ reported Friday, citing people familiar with the matter. From the report: The civil investigation has been under way for a few months, these people said. The Wall Street Journal reported in November that AmEx salespeople touted a tax break based on a shaky interpretation of tax law. The pitch was part of a strategy to persuade business owners to sign up for costly payment services. AmEx previously acknowledged, in response to the November story, that some members of its U.S. sales organization "failed to uphold our values and had positioned certain products inappropriately, specifically with respect to tax benefits." An AmEx spokesman said this week that "we have already taken a number of actions to change products, policies and personnel and are continuing to cooperate with our regulators and government agencies. "As we said in November, we engaged an external law firm to conduct an investigation of our small business sales practices in the U.S.," he added. AmEx "will take further steps as appropriate." AmEx previously said that it discontinued wire services associated with the pitch. These had been available to a wide range of companies, according to people familiar with the matter.
Businesses

Twitter Adopts Poison Pill in Bid To Thwart Elon Musk Takeover (axios.com) 135

Twitter's board on Friday enacted a defensive measure meant to deter Elon Musk's $43 billion hostile takeover bid. From a report: The "poison pill," as it's called in corporate terms, gives Twitter's existing shareholders time to purchase additional shares at a discount, thus diluting Musk's ownership stake. Musk disclosed a 9.2% stake in Twitter earlier this month. He then announced he was joining the company's board of directors and began proposing several changes to the platform, including turning the company's headquarters into a homeless shelter. [...] He later backed out of joining the board and offered to purchase the company for $54.20 a share, though he did specify how he planned to pay for it. Twitter said in a statement that "its Board of Directors has unanimously adopted a limited duration shareholder rights plan. ... The Board adopted the Rights Plan following an unsolicited, non-binding proposal to acquire Twitter."
The Courts

Netflix, Hulu Argue They Aren't 'Video Service Providers' Before Ohio Supreme Court (cleveland.com) 25

An anonymous reader shares a report: A federal class-action lawsuit involving Maple Heights and 2,000 other U.S. communities against Netflix and Hulu took a detour Wednesday through the Ohio Supreme Court, with Maple Heights officials asking state justices to define the streaming giants as "video service providers." If the Supreme Court agrees, the streaming services would be subject to the same video service provider fees paid by cable companies. Those fees in Ohio are 5% of the companies' gross revenues they earn in the city and go directly into city coffers. The streaming companies argued they are instead "specified digital products" under state law. Therefore, they pay state sales taxes, and Ohio would lose money if the court determines they owe the local franchise fees since they would be exempt from state sales tax under Ohio law. The Ohio Supreme Court will determine whether Netflix and Hulu are video service providers, among other legal questions, in the coming months. After the Ohio Supreme Court issues an opinion, the case in federal court in Cleveland can resume. That case involves around 2,000 cities, but U.S. District Judge James Gwin directed the Ohio Supreme Court to answer legal questions first.
Privacy

Apple's Privacy Rules Leave Its Engineers in the Dark (theinformation.com) 34

Privacy is one of the selling points of Apple products. But for employees who develop these products, it can be a pain. The Information: Apple doesn't collect a lot of customer data from its services, including Apple Maps, the Siri voice assistant and its paid video-streaming service, according to more than a dozen former employees. And the customer data it does collect from products like the App Store and Apple Music aren't widely accessible to employees who work on those and other products, these people said. That makes it difficult for Apple to mimic popular features developed by its competitors, which collect more data and have fewer restrictions on employee access to such information, they said.

Look at Apple TV+. The paid video-streaming service, unlike its bigger rivals, doesn't collect demographic info about customers or a history of what they have watched, according to a person with direct knowledge of the situation at Apple. That means Apple TV+ employees can't analyze how customers move from one piece of content to another, making it next to impossible to recommend more videos to them based on their preferences -- a contrast to Netflix, Disney and other streaming services, which use such data to get customers to watch more videos. [...] From Apple's app recommendations to new features for Siri and the company's Goldman Sachs-backed credit card, Apple engineers and data scientists often have to find creative or costly ways to make up for the lack of access to data. In some cases, as with Apple TV+, employees simply have to accept limitations on what they can do.

United States

TikTok Under US Government Investigation Over Child Sexual Abuse Material (arstechnica.com) 15

TikTok is under investigation by US government agencies over its handling of child sexual abuse material, as the burgeoning short-form video app struggles to moderate a flood of new content. From a report: Dealing with sexual predators has been an enduring challenge for social media platforms, but TikTok's young user base has made it vulnerable to being a target. The US Department of Homeland Security is investigating how TikTok handles child sexual abuse material, according to two sources familiar with the case. The Department of Justice is also reviewing how a specific privacy feature on TikTok is being exploited by predators, said one person with knowledge of the case. The DOJ has a longstanding policy of not confirming or denying the existence of ongoing investigations. "It is a perfect place for predators to meet, groom and engage children," said Erin Burke, unit chief of the child exploitation investigations unit at Homeland Security's cyber crime division, calling it the "platform of choice" for the behaviour.
Businesses

Nigerian Banks Hit by 'Great Resignation' of Top Tech Talent (bloomberg.com) 22

Nigerian banks have been hit by an exodus of tech talent, chief executives of the nation's lenders say. From a report: "So many of our very experienced talents especially in the area of software engineering are either leaving the industry or leaving the country," Abubakar Suleiman, chief executive officer of Sterling Bank, told reporters at the end of a meeting of bank CEOs on Thursday, according to a voice recording shared by the central bank. He referred to it as a "great resignation." The meeting came as traditional lenders in Africa's largest economy face stiff competition for talent from technology startups attracting increased funding from international investors and offering better working conditions, in and outside the country. Africa-focused startups raised a record $5 billion last year, with those specializing in digital and mobile payments and lending soaking up most of the funding. Two economic contractions in the last five years have also forced some Nigerians with globally marketable skills to leave the country, with the U.S., Canada and U.K. being preferred destinations.
Windows

Why Gamers Are Adopting Windows 11 More Slowly Than Windows 10 (arstechnica.com) 107

Ars Technica's Andrew Cunningham combed through Steam Hardware & Software Survey data "to see how Windows 11 is fairing with enthusiasts." An anonymous reader shares an excerpt from the report: Steam users are migrating to Windows 11 about half as quickly as they moved to Windows 10. Six months after its release, Windows 10 ran on 31 percent of all Steam computers -- nearly one in three. As of March 2022, Windows 11 runs on just under 17 percent of Steam computers -- about one in six. Three-quarters of all Steam computers in 2022 are still running Windows 10. It's easy to interpret these results as an indictment of Windows 11, which generated some controversy with its relatively stringent (and often poorly explained) security-oriented system requirements. At least some of this slow adoption is caused by those system requirements -- many of the PCs surveyed by Steam probably can't install Windows 11. That could be because users have an older unsupported CPU or have one or more of the required security features disabled; Secure Boot and the firmware TPM module were often turned off by default on new motherboards for many years. But there are other compelling explanations. Windows 11's adoption looks slow compared to Windows 10, but Windows 10's adoption was also exceptionally good.

Windows 8 and 8.1 were not well-loved, to put it mildly, and Windows 10 was framed as a response to (and a fix for) most of Windows 8's user interface changes. And people who were still on Windows 7 were missing out on some of the nice quality-of-life additions and under-the-hood improvements that Windows 8 added. You can see that pent-up demand in the jump between July 2015 and September 2015. In the first two months of Windows 10's availability, Windows 8 hemorrhaged users, falling from around 35 percent usage to 19 percent. Virtually all of those users -- and a smaller but still notable chunk of Windows 7 users -- were moving to Windows 10. Windows 11 also got a decent early adopter bump in November 2021, but its gains every other month were much smaller.

In contrast, Windows 11 was announced with little run-up, and it was replacing what users had been told was the "last version of Windows." Where Windows 10 replaced one new, unloved OS and one well-liked but aging OS, Windows 11 replaced a modern OS that nobody really complained about (Windows 10 ran on over 90 percent of all Steam computers in September 2021 -- even Windows 7 in its heyday couldn't boast that kind of adoption). It's also worth noting that Microsoft didn't try to re-create that initial burst of adoption for Windows 11. Following some turbulence after early Windows 10 servicing updates, Microsoft began rolling updates out more methodically, starting with small numbers of PCs and then expanding availability gradually as problems were discovered and ironed out. Windows 11 only entered "its final phase of availability" in February, ensuring that anyone with a compatible PC could get Windows 11 through Windows Update if they wanted it.

NASA

Hubble Telescope Confirms Largest Comet Nuclear Ever Seen (npr.org) 26

NASA's Hubble Space Telescope has confirmed the largest icy comet nucleus ever seen by scientists. NPR reports: The nucleus of comet C/2014 UN271 (Bernardinelli-Bernstein) is about 80 miles in diameter, which is larger than the state of Rhode Island, NASA says. The comet's nucleus is about 50 times larger than that of most comets, and its mass is estimated to be a gigantic 500 trillion tons.

Comet C/2014 UN271 was discovered by astronomers Pedro Bernardinelli and Gary Bernstein using archival images from the Cerro Tololo Inter-American Observatory in Chile. The comet has been observed since 2010, when it was 3 billion miles away from the sun, and has been studied since then. NASA says there was a challenge in measuring the comet's nucleus because it was too far away for the Hubble telescope to determine its size. Instead, scientists had to make a computer model that was adjusted to fit the images of the comet's bright light that they got from the telescope's data.

Despite traveling at 22,000 mph, the massive comet is still coming from the edge of the solar system. But NASA assures us that it will never get closer than 1 billion miles away from the sun -- and even then, that won't be until 2031. The previous record-holder for largest comet nucleus was discovered in 2002. Comet C/2002 VQ94 was approximately 60 miles across.

Space

NASA Will Test SpinLaunch's Ability To Fling Satellites Into Orbit (newatlas.com) 61

NASA has signed up to test SpinLaunch's extraordinary whirl 'n' hurl space launch technology, which accelerates a launch vehicle to hypersonic speeds using an electric centrifuge instead of a rocket, hurling it skyward like a space discus. New Atlas reports: The idea behind SpinLaunch is as staggering as the company's name is appropriate. The idea of winding up and throwing satellites most of the way into orbit just boggles the mind. But in initial testing, this company's kinetic launch system, which looks externally a lot like a turbocharger, has shown promise as an environmentally-friendly, and potentially cost-effective replacement for first-stage rocket launches. [T]he company says it'll be appropriate for smaller launch vehicles weighing up to about 440 lb (200 kg), carrying ultra-ruggedized satellites capable of dealing with the forces involved. The SpinLaunch system will do the first part, flinging them high into the air, where a second-stage rocket can take over and give them the final push into orbit.

And the advantages are pretty compelling. SpinLaunch says that eliminating the first-stage rocket from the launch vehicle will cut out some 70 percent of the fuel and structures needed by a traditional launch vehicle, and that it can get appropriate loads into orbit using a quarter of the fuel, and at a tenth of the price. NASA is one of many parties interested in this possibility, and it's now signed a Space Act agreement with SpinLaunch to develop and integrate a NASA payload for this kinetic launch system, which will be flung skyward from Spaceport America, New Mexico, in a test flight later this year.

This, like all SpinLaunch "regular" test flights to date, will be a slower sub-orbital launch with a speed closer to 1,000 mph (1,600 km/h, Mach 1.3) than 5,000 mph. The payload will be designed to take a range of measurements, which will be analyzed by both groups. All non-proprietary information learned from this test will be published, and SpinLaunch says it's working towards its first orbital launch in 2025.
A render posted late last year by SpinLaunch shows how their system works.
Medicine

Researchers Rejuvenate Skin Cells of 53-Year-Old Woman To the Equivalent of a 23-Year-Old's (bbc.com) 58

An anonymous reader quotes a report from the BBC: Researchers have rejuvenated a 53-year-old woman's skin cells so they are the equivalent of a 23-year-old's. [...] The scientists in Cambridge believe that they can do the same thing with other tissues in the body. The head of the team, Prof Wolf Reik, of the Babraham Institute in Cambridge, told BBC News that he hoped that the technique could eventually be used to keep people healthier for longer as they grow older. [...] Prof Reich stressed though that the work, which has been published in the journal eLife, was at a very early stage. He said that there were several scientific issues to overcome before it could move out of his lab and into the clinic. But he said that demonstrating for the first time that cell rejuvenation is possible was a critical step forward.

Prof Reik's team used [a method, called iPS, that involves adding chemicals to adult cells to turn them into stem cells] on 53-year-old skin cells. But they cut short the chemical bath from 50 days to around 12. Dr Dilgeet Gill was astonished to find that the cells had not turned into embryonic stem cells -- but had rejuvenated into skin cells that looked and behaved as if they came from a 23-year old. He said: "I remember the day I got the results back and I didn't quite believe that some of the cells were 30 years younger than they were supposed to be. It was a very exciting day!"

The technique cannot immediately be translated to the clinic because the iPS method increases the risk of cancers. But Prof Reik was confident that now it was known that it is possible to rejuvenate cells, his team could find an alternative, safer method. "The long-term aim is to extend the human health span, rather than the lifespan, so that people can get older in a healthier way," he said. Prof Reik says some of the first applications could be to develop medicines to rejuvenate skin in older people in parts of the body where they have been cut or burned -- as a way to speed up healing. The researchers have demonstrated that this is possible in principle by showing that their rejuvenated skin cells move more quickly in experiments simulating a wound. The next step is to see if the technology will work on other tissues such as muscle, liver and blood cells.

Medicine

MS Symptoms May Have Been 'Reversed' In Immunotherapy Breakthrough (iflscience.com) 28

A new immunotherapy that targets cells infected with Epstein-Barr Virus (EBV) has halted the progression of multiple sclerosis (MS) in a small trial. Perhaps even more incredibly, in some patients, it is possible that symptoms of MS were actually reversed, though this was not fully identified in the most recent presentation of results (PDF). IFLScience reports: [S]ignificant evidence has linked infection of EBV and the eventual development of MS. [...] Attempting to "transform treatment of Multiple Sclerosis," Atara Biotherapeutics has developed an allogeneic T-cell therapy called ATA188. The concept is simple -- when cells are infected with EBV, they express small proteins called antigens on the cell surface, and the immunotherapy contains immune cells that target and destroy them.

In a trial of 24 patients who received the therapy, 20 saw improvements or stability in their symptoms and no fatal or serious adverse effects were reported. Early brain scans suggest that some damaged nerve cells may have been "repaired" by the therapy in a process called remyelination, which could mean a reversal of damage caused by MS in the nervous system, but this has not yet been confirmed. While the results are extremely promising, it is an early Phase 1 trial with a small sample size and no placebo or control group, so it is unclear whether the results are significant at this stage. However, it is unlikely that this repair would occur naturally, suggesting the therapy is having a beneficial effect on some level.

Social Networks

Reddit Adds Comment Searching To Help Improve Search Results (theverge.com) 11

Today, Reddit is updating its search feature to index comments. The Verge reports: For the first time, users will have an option to pull results from replies to posts, making it less of a hassle to find something specific outside of general Reddit posts, communities, and people. The rollout is Reddit's latest change to help users encounter content from outside their usual subreddits following the addition of a discovery tab on its mobile app in January.

Reddit says that in a user survey last year, the ability to search comments was one of the top results. During "limited initial testing," Reddit claimed 26,000 users went on to use the feature against five billion comments. Right now, the new ability is available globally for users searching on Reddit's desktop website, but not via its apps.
The company "is also updating its search experience to help users find more relevant search results written by real people," adds The Verge. "For example, when searching for something, instead of showing search results with that exact wording, related results will pop up instead to make the search less restrictive."

Slashdot Top Deals