Security

Should Private Companies Be Allowed To Hit Back At Hackers? (vice.com) 141

An anonymous reader quotes a report from Motherboard: The former director of the NSA and the U.S. military's cybersecurity branch doesn't believe private companies should be allowed to hit back at hackers. "If it starts a war, you can't have companies starting a war. That's an inherently governmental responsibility, and plus the chances of a company getting it wrong are fairly high," Alexander said during a meeting with a small group of reporters on Monday. During a keynote he gave at a cybersecurity conference in Manhattan, Alexander hit back at defenders of the extremely common, although rarely discussed or acknowledged, practice of revenge hacking, or hack back. During his talk, Alexander said that no company, especially those attacked by nation state hackers, should ever be allowed to try to retaliate on its own.

Using the example of Sony, which was famously hacked by North Korea in late 2014, Alexander said that if Sony had gone after the hackers, it might have prompted them to throw artillery into South Korea once they saw someone attacking them back. "We can give Sony six guys from my old place there," he said, presumably referring to the NSA, "and they'd beat up North Korea like red-headed stepchild -- no pun intended." But that's not a good idea because it could escalate a conflict, and "that's an inherently governmental responsibility. So if Sony can't defend it, the government has to." Instead, Keith argued that the U.S. government should be able to not only hit back at hackers -- as it already does -- but should also have more powers and responsibilities when it comes to stopping hackers before they even get in. Private companies should share more data with the U.S. government to prevent breaches, ha said.

Twitter

Twitter Exploit Let Two Pranksters Post 30,000-Character Tweet (engadget.com) 65

sqorbit writes: Two German twitter users were able to post a 30,000-character tweet, blowing way past the 280-character limit it is testing for select users. The accounts were banned for a brief period of time but are now back online after they apologized. The original 30,396-character tweet has been archived and can be viewed here. The two pranksters exploited "a rule Twitter made in 2016 that links would no longer count in the 140-character limit," reports The Daily Dot. "Yes, this is just one big web address with a URL code hidden deep in the large block of text."
Patents

Apple Wins $120 Million From Samsung In Slide-To-Unlock Patent Battle (theverge.com) 72

Apple has finally claimed victory over Samsung to the count of $120 million. "The Supreme Court said today that it wouldn't hear an appeal of the patent infringement case, first decided in 2014, which has been bouncing through appeals courts in the years since," reports The Verge. From the report: The case revolved around Apple's famous slide-to-unlock patent and, among others, its less-famous quick links patent, which covered software that automatically turned information like a phone number into a tappable link. Samsung was found to have infringed both patents. The ruling was overturned almost two years later, and then reinstated once again less than a year after that. From there, Samsung appealed to the Supreme Court, which is where the case met its end today. Naturally, Samsung isn't pleased with the outcome. "Our argument was supported by many who believed that the Court should hear the case to reinstate fair standards that promote innovation and prevent abuse of the patent system," a Samsung representative said in a statement. The company also said the ruling would let Apple "unjustly profit" from an invalid patent.
Businesses

Paradise Papers Leak Reveals Apple's Secret Tax Bolthole (bbc.com) 174

An anonymous reader quotes a report from BBC: The world's most profitable firm has a secretive new structure that would enable it to continue avoiding billions in taxes, the Paradise Papers show. They reveal how Apple sidestepped a 2013 crackdown on its controversial Irish tax practices by actively shopping around for a tax haven. It then moved the firm holding most of its untaxed offshore cash, now $252 billion, to the Channel Island of Jersey. Apple said the new structure had not lowered its taxes. It said it remained the world's largest taxpayer, paying about $35 billion in corporation tax over the past three years, that it had followed the law and its changes "did not reduce our tax payments in any country."

Leaked emails also make it clear that Apple wanted to keep the move secret. One email sent between senior partners at Appleby says: "For those of you who are not aware, Apple [officials] are extremely sensitive concerning publicity. They also expect the work that is being done for them only to be discussed amongst personnel who need to know." Apple chose Jersey, a UK Crown dependency that makes its own tax laws and which has a 0% corporate tax rate for foreign companies. Paradise Papers documents show Apple's two key Irish subsidiaries, Apple Operations International (AOI), believed to hold most of Apple's massive $252 billion overseas cash hoard, and Apple Sales International (ASI), were managed from Appleby's office in Jersey from the start of 2015 until early 2016. This would have enabled Apple to continue avoiding billions in tax around the world.
The report notes that Apple paid just $1.65 billion in taxes to foreign governments, despite making $44.7 billion outside the U.S. That's a tax rate of 3.7%, which is less than a sixth of the average rate of corporation tax in the world.
Firefox

Popular Firefox Bookmark Syncing Add-On Starts Losing... Bookmarks (bleepingcomputer.com) 67

A popular Firefox browser add-on that saves and syncs bookmarks has started to lose those bookmarks instead, users are complaining. From a report: According to user reports -- and your reporter's own experience -- the problems arose when Xmarks updated the add-on to version 4.5.0.4, the first version to work on the new WebExtensions API, Firefox's new add-on technology. Since then, Firefox users have reported a wide range of problems, but among which the biggest was the fact that Xmarks was not syncing bookmarks as it should. The problems did not manifest the same way for all users. Some users said the add-on stopped syncing new bookmarks altogether, some reported corrupted links, others said they lost all bookmarks, while other reported that only a small portion of new bookmark URLs was being added to their Xmarks account.
Youtube

'Something Is Wrong On the Internet' (medium.com) 365

"Someone or something or some combination of people and things is using YouTube to systematically frighten, traumatize, and abuse children, automatically and at scale, and it forces me to question my own beliefs about the internet, at every level," writes James Bridle. From the article: To begin: Kid's YouTube is definitely and markedly weird. I've been aware of its weirdness for some time. Last year, there were a number of articles posted about the Surprise Egg craze. Surprise Eggs videos depict, often at excruciating length, the process of unwrapping Kinder and other egg toys. That's it, but kids are captivated by them. There are thousands and thousands of these videos and thousands and thousands, if not millions, of children watching them. [...] What I find somewhat disturbing about the proliferation of even (relatively) normal kids videos is the impossibility of determining the degree of automation which is at work here; how to parse out the gap between human and machine. The New York Times, last week: Parents and children have flocked to Google-owned YouTube Kids since it was introduced in early 2015. The app's more than 11 million weekly viewers are drawn in by its seemingly infinite supply of clips, including those from popular shows by Disney and Nickelodeon, and the knowledge that the app is supposed to contain only child-friendly content that has been automatically filtered from the main YouTube site. But the app contains dark corners, too, as videos that are disturbing for children slip past its filters, either by mistake or because bad actors have found ways to fool the YouTube Kids algorithms. In recent months, parents like Ms. Burns have complained that their children have been shown videos with well-known characters in violent or lewd situations and other clips with disturbing imagery, sometimes set to nursery rhymes.
The Internet

Comcast's Xfinity Internet Service Is Down Across the US [Update] (theverge.com) 104

Readers share a report: Comcast's internet service, Xfinity, appears to be suffering an outage across the country. DownDetector.com shows it being down around the United States, including in large cities like San Francisco, Los Angeles, and Boston. So far, online reports don't suggest that TV service or home phones are affected. On Twitter, Comcast confirmed the outage. Adding, "Some customers are having issues with their XFINITY Internet service. We apologize & appreciate your patience while we work to fix." The company tweeted moments ago, "Our teams continue to monitor an external network issue. We apologize for the inconvenience -- will provide updates as we learn more." In another tweet, Comcast said the issue is nationwide.

Update: At 20:39 GMT on Monday, Comcast said it had resolved the issue.
Businesses

China is Finally Going After Click Farms and Fake Online Sales (bloomberg.com) 20

China enacted sweeping changes to a business competition law to address fraud in the e-commerce industry, which is plagued by malfeasance ranging from fake positive reviews to merchants goosing sales numbers. From a report: The National People's Congress adopted revisions Saturday to the Anti-Unfair Competition Law intended to address online retailers, the official Xinhua News Agency reported. The changes take effect Jan. 1 but were announced days before Alibaba Group Holding Ltd.'s Nov. 11 Singles' Day bargain extravaganza, which dwarfs Black Friday in the U.S. in terms of revenue. The Chinese law initially took effect in 1993 as a way to protect consumers and businesses from unfair market practices. At that time, none of China's biggest online companies -- including Alibaba, Tencent Holdings Ltd., Baidu Inc. and JD.com Inc. -- even existed. As e-commerce developed and prospered, attendant problems grew with it. These latest revisions stipulate that operators shouldn't deceive consumers by faking sales or employing "click farms" to rack up positive product reviews -- increasingly common practices that have drawn the ire of buyers. And the rules encompass the entire breadth of internet commerce, from online goods and movie ticketing to food delivery.
Privacy

One in Four UK Workers Maliciously Leaks Business Data Via Email, Study Says (betanews.com) 30

From a report: New research into insider threats reveals that 24 percent of UK employees have deliberately shared confidential business information outside their company. The study from privacy and risk management specialist Egress Software Technologies also shows that almost half (46 percent) of respondents say they have received a panicked email recall request, which is not surprising given more than a third (37 percent) say they don't always check emails before sending them. The survey of 2,000 UK workers who regularly use email as part of their jobs shows the biggest human factor in sending emails in error is listed as 'rushing' (68 percent). However alcohol also plays a part in eight percent of all wrongly sent emails -- where are these people working!? Autofill technology, meanwhile, caused almost half (42 percent) to select the wrong recipient in the list.
Businesses

Most Amazon Prime Subscribers Say They Don't Want To Buy the Amazon Key That Lets Delivery People Into Their Homes (recode.net) 357

A reader shares a report: Next week, Amazon will start delivering packages straight into Americans' homes, using a smart lock and camera device called Amazon Key. But will anyone bother paying for what seems like an invasive service? Most wouldn't. About 58 percent of people who have Amazon Prime definitely would not buy Amazon Key, according to a SurveyMonkey poll done on behalf of Recode. That's only slightly less than the 61 percent of all U.S. adults who wouldn't buy the product, suggesting it's broadly unattractive, regardless of whether people are Amazon customers. Among Prime subscribers, only 5 percent said they would definitely buy Amazon Key. Of all U.S. shoppers, even less -- 4 percent -- said they would. Nearly 60 percent of the respondents have Prime subscriptions.
Businesses

Amazon Discounts Other Sellers' Products as Retail Competition Stiffens (reuters.com) 98

Amazon is slashing prices of products from third-party sellers on its website, moving beyond its more typical method of discounts on items it sells directly. From a report: The "discount provided by Amazon" applies to products including board games and technological gadgets offered by other merchants as the holiday season approaches. The retailer has been trying to compete aggressively on some items to win sales and draw customers away from low-priced rivals like Wal-Mart Stores. The move allows Amazon to sell the products at lower prices while still giving full price to the sellers. "When Amazon provides a discount, customers get the products they want at a price they'll love, and small businesses receive increased sales at their listed asking price," an Amazon spokeswoman said in an emailed statement, noting that businesses can opt out at any time.
Businesses

Qualcomm Set To Reject $130bn Bid From Broadcom (ft.com) 29

Tim Bradshaw, reporting for Financial Times: Chipmaker Broadcom officially unveiled a $130bn offer, including net debt, for Qualcomm on Monday, in what could be the largest tech deal in history. Under Broadcom's proposal, Qualcomm shareholders would receive $70 per share -- $60 in cash and $10 in shares of its rival. It would value Qualcomm's equity at roughly $103bn. Qualcomm is set to reject Broadcom's takeover offer (Editor's note: the link could be paywalled; an alternative source wasn't immediately available), as the US chipmaker views its rival's $130bn proposal as too low and fraught with regulatory risks, people familiar with the matter said. The offer represents a 28 per cent premium over Qualcomm's share price on November 2, after it first emerged that Broadcom was preparing an offer. Broadcom also said that its offer stands whether or not Qualcomm completes its $38bn acquisition of NXP, which has yet to close.
Censorship

Afghanistan Clarifies It Will Not Block WhatsApp, Telegram (reuters.com) 18

The Afghan government will not block the instant messaging services WhatsApp and Telegram, a spokesman told news agency Reuters on Monday, following days of controversy after reports the services would be suspended. From a report: "Government of Afghanistan isn't going to ban any social media platforms. WhatsApp and Telegram to continue operating in Afghanistan," Javid Faisal, deputy spokesman to government Chief Executive Abdullah Abdullah wrote on Twitter. The row over instant messaging services began after a letter from Afghanistan's telecoms regulator to Internet service providers telling them to block the services "without delay" was circulated on social media platforms last week.
Intel

Arch-rivals Intel and AMD Team Up on PC Chips To Battle Nvidia (pcworld.com) 169

Intel and AMD, arch-rivals for decades, are teaming up to thwart a common competitor, Nvidia. On Monday, the two companies said they are co-designing an Intel Core microprocessor with a custom AMD Radeon graphics core inside the processor package. The chip is intended for laptops that are thin and lightweight but powerful enough to run high-end videogames, the companies said. From a report: Executives from both AMD and Intel told PCWorld that the combined AMD-Intel chip will be an "evolution" of Intel's 8th-generation, H-series Core chips, with the ability to power-manage the entire module to preserve battery life. It's scheduled to ship as early as the first quarter of 2018. Though both companies helped engineer the new chip, this is Intel's project -- Intel first approached AMD, both companies confirmed. AMD, for its part, is treating the Radeon core as a single, semi-custom design, in the same vein as the chips it supplies to consoles like the Microsoft Xbox One X and Sony Playstation 4. Some specifics, though, remain undisclosed: Intel refers to it as a single product, though it seems possible that it could eventually be offered at a range of clock speeds. [...] Shaking hands on this partnership represents a rare moment of harmony in an often bitter rivalry that began when AMD reverse-engineered the Intel 8080 microchip in 1975.
Music

A Global Shortage of Magnetic Tape Leaves Cassette Fans Reeling (wsj.com) 276

A reader shares a report: Steve Stepp and his team of septuagenarian engineers are using a bag of rust, a kitchen mixer larger than a man and a 62-foot-long contraption that used to make magnetic strips for credit cards to avert a disaster that no one saw coming in the digital-music era. The world is running out of cassette tape (Editor's note: the link could be paywalled; alternative source). National Audio Co., where Mr. Stepp is president and co-owner, has been hoarding a stockpile of music-quality, an-eighth of an inch-wide magnetic tape from suppliers that shut down in the past 15 years after music lovers ditched cassettes. National Audio held on. Now, many musicians are clamoring for cassettes as a way to physically distribute their music. The company says it has less than a year's supply of tape left. So it is building the first manufacturing line for high-grade ferric oxide cassette tape in the U.S. in decades. If all goes well, the machine will churn out nearly 4 miles of tape a minute by January. And not just any tape. "The best tape ever made," boasts Mr. Stepp, 69 years old. "People will hear a whole new product."

Slashdot Top Deals