Last year's massive data breach at Equifax should have been a wake-up call for the entire industry. But a year after the patches were released, some of the world's wealthiest companies are still using, or have since introduced the same flawed software. From a report: Thousands of companies have downloaded vulnerable versions of Apache Struts, a popular web server software used across the Fortune 100 to provide web applications in Java. It's often used to power both front- and back-end applications -- including Equifax's public website. The bug used in the Equifax hack was fixed in March 2017, but Equifax never installed the patches. Since those patches were made available, data seen by ZDNet shows that least 10,800 companies downloaded vulnerable versions of the software. The data, provided by Sonatype, an open-source automation firm, shows that over half of the Fortune Global 100 are using vulnerable versions of the software. Although the firm wouldn't name the affected companies, a quarter of them are based in North America. The data showed that seven are tech giants, and 15 are financial services or insurance firms.

You would think that after decades of analyzing and fighting email spam, there'd be a fix by now for the internet's oldest hustle -- the Nigerian Prince scam. But the problem, a new report suggests, has only grown to become more widespread and sophisticated. From the report: There's generally more awareness that a West African noble demanding $1,000 in order to send you millions is a scam, but the underlying logic of these "pay a little, get a lot" schemes, also known as 419 fraud, still ensnares a ton of people. In fact, groups of fraudsters in Nigeria continue to make millions off of these classic cons. And they haven't just refined the techniques and expanded their targets -- they've gained minor celebrity status for doing it.

On Thursday, the security firm Crowdstrike published detailed findings on Nigerian confraternities, cultish gangs that engage in various criminal activities and have steadily evolved email fraud into a reliable cash cow. The groups, like the notorious Black Axe syndicate, have mastered the creation of compelling and credible-looking fraud emails. Crowdstrike notes that the groups aren't very regimented or technically sophisticated, but flexibility and camaraderie still allow them to develop powerful scams.

Microsoft is investing in Windows experiences on mobile devices, with a new app called Your Phone; a migration of Windows 10's Timeline productivity feature to phones; and an update to its launcher app for enterprises. The app, available on Android and iOS, is designed to provide a mirror of a phone straight to a desktop PC, and it will let Windows 10 users access texts, photos, and notifications from their machines. Features will vary depending on iOS and Android. From a report: While Microsoft is also expected to discuss some of the features of its next Windows 10 update (code-named "Redstone 5") at Build, the company indicated that it will be emphasizing cross-platform apps instead. Microsoft will discuss some of these in a Tuesday presentation by Joe Belfiore, who leads Windows "experiences" as the corporate vice president in the Operating Systems Group at Microsoft.

The idea, Belfiore said in a briefing in advance of the show, was that Microsoft needs to know what users are working on, across any device. "Whether you look at a Word doc on Android, iOS, or Windows, is irrelevant," Belfiore said. Belfiore was talking about Timeline, the feature that tracks your work in the Office apps or Edge, recording your activity in what Microsoft calls the Microsoft Graph. But Belfiore could have been talking about any hardware platform. Microsoft sounds like it wants to elevate Microsoft mobile applications to the level of importance of a PC -- making the actual hardware, and operating system, irrelevant.

The volume of pesky robocalls -- and their scams -- have skyrocketed in recent years, reaching an estimated 3.4 billion in April. [Editor's note: the link may be paywalled; alternative source.] From a report: In an age when cellphones have become extensions of our bodies, robocallers now follow people wherever they go, disrupting business meetings, church services and bedtime stories with their children. Though automated calls have long plagued consumers, the volume has skyrocketed in recent years, reaching an estimated 3.4 billion in April, according to YouMail, which collects and analyzes calls through its robocall blocking service. That's an increase of almost 900 million a month compared with a year ago. Federal lawmakers have noticed the surge. Both the House and Senate held hearings on the issue within the last two weeks, and each chamber has either passed or introduced legislation aimed at curbing abuses.

Federal regulators have also noticed, issuing new rules in November that give phone companies the authority to block certain robocalls. Law enforcement authorities have noticed, too. Just the other week, the New York State attorney general, Eric T. Schneiderman, warned consumers about a scheme targeting people with Chinese last names, in which the caller purports to be from the Chinese Consulate and demands money. Since December, the New York Police Department said, 21 Chinese immigrants had lost a total of $2.5 million.

Over 700 million devices run Windows 10, Microsoft announced on Monday at its Build developer conference. From a report: Almost exactly a year ago, that number stood at 500 million. In addition, the company also today noted that Office 365 now has 135 million monthly active commercial users, up from 120 million last October. Back in 2015, when Windows 10 launched, Microsoft's original goal was to hit a billion devices by 2018. It quickly became clear that this was a bit too optimistic. While Windows 10 usage clearly continues to grow at a decent speed, we're not likely to see it hit a billion users soon. In a wide-ranging interview with news outlet The Verge, Microsoft chief executive Satya Nadella discusses the future of Microsoft. (He gave an interview to CNBC as well.) Onstage at Build, Nadella said "privacy is a human right."

Flash is designed to last a decade or more of use. A lot of the gadgets that rely on it, however, are not. Shady recyclers have spotted opportunity in that mismatch, stripping out used chips and selling them as new. But fret not, there is something that can be done to address the issue. From a report: Engineers at the University of Alabama have come up with a straightforward electronic examination that can tell if a flash chip is new or recycled, even if that chip has only seen 5 percent or less of its life. And the technique is so straightforward that a smartphone app could run it on its own memory. [...] A flash memory cell is like an ordinary transistor, it has a source and a drain and a channel through which current flows under the control of voltage on the gate electrode. The difference is that the gate is split into several layers -- the control gate, the blocking oxide, the floating gate, and the tunneling oxide.

[...] Voltage on the control gate causes electrons to tunnel through that bottom oxide and get stuck inside the floating gate. This charge or its absence is the stored bit. It alters how much voltage you need to turn the transistor on in a way that you can easily measure. Erasing the bit is done by reversing the voltage and driving the charge out of the floating gate. Ray and his team took advantage of the rather high voltages -- about plus or minus 20 volts -- needed to program and erase flash. The more you program and erase a cell, the more defects will accumulate in the oxide, he explains.

Catalin Cimpanu, reporting for BleepingComputer: A new service called GDPR Shield made the rounds last week and for all the wrong reasons. The service, advertised as a piece of JavaScript that webmasters embed on their sites, blocks EU-based users from accessing a website, just so the parent company won't have to deal with GDPR compliance. GDPR, or General Data Protection Regulation, is a new user and data privacy regulation slated to come into effect in the EU three weeks from now, on May 25, 2018.

The new regulation brings a wealth of protections to user privacy but is a nightmare for companies doing business in Europe. The reasons are plenty, but the humongous fines for failing to meet GDPR standards are at the top of the list for most companies ($24 million or 4% of a company's annual worldwide revenue -- whichever is higher). There's also the 72-hour deadline to reveal data breaches and the necessity of hiring a so-called "Data Protection Officer." Plus, GDPR also mandates that companies must inform users on what data they collected about them, allow them to review the data, and even let users delete the data from the company's servers if they so wish.

Unroll.me, a company that has, for years, used the premise useful "email unsubscription" service to gain access to people's email inboxes in order to data-mine the contents for competitive intelligence -- and controversially flog the gleaned commercial insights to the likes of Uber -- is to stop serving users in Europe ahead of a new data protection enforcement regime incoming under GDPR, which applies from May 25. From a report: In a section on its website about the regional service shutdown, the company writes that "unfortunately we can no longer support users from the EU as of the 23rd of May," before asking whether a visitor lives in the EU or not. Clicking 'no' doesn't seem to do anything but clicking 'yes' brings up another info screen where Unroll.me writes that this is its "last month in the EU" -- because it says it will be unable to comply with "all GDPR requirements" (although it does not specify which portions of the regulation it cannot comply with).

An anonymous reader quotes a report from The Wall Street Journal: In a move that could further heighten tensions with the U.S., China is poised to announce a new fund of about $47.4 billion (Warning: source may be paywalled; alternative source) to spur development of its semiconductor industry as it seeks to close the technology gap with the U.S. and other rivals, according to people familiar with the matter. The new war chest by the government-backed China Integrated Circuit Industry Investment Fund Co. follows a similar fund launched in 2014 that raised $21.8 billion, largely funded by central and local government-backed enterprises and industry players. Among other efforts, the fund would be used to improve China's ability to design and manufacture advanced microprocessors and graphic-processing units, one of the people said. Specific details including the amount could change, another person said.

In preparation for a crewed mission into orbit, NASA safety advisers are warning that the super-cold propellant SpaceX uses in their Falcon 9 rockets could be "a potential safety risk." When SpaceX is about to launch a rocket, they load it up with propellant at super-cold temperatures to shrink its size, allowing them to pack more of it into the tanks. "At those extreme temperatures, the propellant would need to be loaded just before takeoff -- while astronauts are aboard," reports Chicago Tribune. "An accident, or a spark, during this maneuver, known as 'load-and-go,' could set off an explosion." From the report: One watchdog group labeled load-and-go a "potential safety risk." A NASA advisory group warned in a letter that the method was "contrary to booster safety criteria that has been in place for over 50 years." The fueling issue is emerging as a point of tension between the safety-obsessed space agency and the maverick company run by Musk, a tech entrepreneur who is well known for his flair for the dramatic and for pushing boundaries of rocket science. The concerns from some at NASA are shared by others. John Mulholland, who oversees Boeing's contract to fly astronauts to the International Space Station and once worked on the space shuttle, said load-and-go fueling was rejected by NASA in the past because "we never could get comfortable with the safety risks that you would take with that approach. When you're loading densified propellants, it is not an inherently stable situation."

Greg Autry, a business professor at the University of Southern California, said the load-and-go procedures were a heated issue when he served on Trump's NASA transition team. "NASA is supposed to be a risk-taking organization," he said. "But every time we would mention accepting risk in human spaceflight, the NASA people would say, 'But, oh, you have to remember the scar tissue' -- and they were talking about the two shuttle disasters. They seemed to have become victims of the past and unwilling to try anything new, because of that scar tissue."

Ticketmaster's parent company, Live Nation, has announced that they have teamed up with and invested in a face recognition company called Blink Identity. The ticket sales giant may have plans to scan your face instead of a ticket to grant you access to a venue. Engadget reports: In its first quarter financial report (PDF), Live Nation has explained that Blink has "cutting-edge facial recognition technology, enabling you to associate your digital ticket with your image, then just walk into the show." According to Blink's website, its system can register an image of your face as soon as you walk past a sensor. Blink's technology can then match it against a large database in half a second -- in a blink, so to speak. It's also apparently powerful enough that you don't even have to slow down for its system to recognize you: Just walk normally, and if the technology gets a match, it'll automatically open doors or turnstiles to let you in.

An anonymous reader quotes a report from Ars Technica: Alan Turing is rightly famed for his contributions to computer science. But one of his key concepts -- an autonomous system that can generate complex behavior from a few simple rules -- also has applications in unexpected places, like animal behavior. One area where Turing himself applied the concept is in chemistry, and he published a paper describing how a single chemical reaction could create complex patterns like stripes if certain conditions are met. It took us decades to figure out how to actually implement Turing's ideas about chemistry, but we've managed to create a number of reactions that display the behaviors he described. And now, a team of Chinese researchers has figured out how to use them to make something practical: a highly efficient desalination membrane.

To make this a true Turing-style system, the researchers dissolved a large molecule in water. This had the effect of making the water more viscous, which slowed the diffusion of the activator. In addition, the molecule was chosen so that the activator would stick to it, slowing things down even further. The end result was a system similar to the ones defined over a half-century ago. Imaging of the features show that rather than simply thickening the membrane, the membrane retained the same width in these areas; instead, it bulged out to form the structures. That's critical, as the amount of surface area exposed to a salt solution should influence how much water gets through the membrane. In fact, the researchers confirmed that more water was purified when the new membranes were used (the version with the stripes outperformed the dotted one). Unfortunately, the researchers don't compare this system to commercially available membranes. The report has been published in the journal Science.

A Reuters/Ipsos survey found that Facebook users in the U.S. remain loyal to the site, despite the recent Cambridge Analytica scandal that exposed the data of 87 million users. The survey "found no clear loss or gain in use since then," reports the BBC. From the report: Conducted online, the Reuters/Ipsos survey questioned 2,194 American adults between April 26 and April 30. The poll has a margin of error of three percentage points. Some 64% percent said they used Facebook at least once a day, down slightly from the 68% recorded in a similar poll in late March, soon after the Cambridge Analytica story broke. Asked if they were aware of their current privacy settings, 74% of Facebook users said they were, and 78% said they knew how to change them. Among Twitter users, this was 55% and 58%, while for Instagram users, it was 60% and 65%.

An anonymous reader quotes a report from The Washington Post: For the first time since humans have been monitoring, atmospheric concentrations of carbon dioxide have exceeded 410 parts per million averaged across an entire month (Warning: source may be paywalled; alternative source), a threshold that pushes the planet ever closer to warming beyond levels that scientists and the international community have deemed "safe." The reading from the Mauna Loa Observatory in Hawaii finds that concentrations of the climate-warming gas averaged above 410 parts per million throughout April. The first time readings crossed 410 at all occurred on April 18, 2017, or just about a year ago. Carbon dioxide concentrations -- whose "greenhouse gas effect" traps heat and drives climate change -- were around 280 parts per million circa 1880, at the dawn of the industrial revolution. They're now 46 percent higher. According to Scripps Institute of Oceanography, this amount is the highest in at least the past 800,000 years. "We keep burning fossil fuels. Carbon dioxide keeps building up in the air," said Scripps scientist Ralph Keeling, who maintains the longest continuous record of atmospheric carbon dioxide on Earth. "It's essentially as simple as that."