Orome1 quotes Help Net Security:After the recent massive WannaCry ransomware campaign, Elad Erez, Director of Innovation at Imperva, was shocked at the number of systems that still sported the Microsoft Windows SMB Server vulnerabilities that made the attack possible. So, he decided to do something about it: he created Eternal Blues, an easy-to-use vulnerability scanner that he made available for download for free... The statistics collected by the tool, as well as the total number of downloads, show that after the NotPetya attack, people's awareness of the threat did increase... Over 8 million IP addresses were scanned, and a total of 60,000 vulnerable hosts were identified (out of ~537,000 that were responsive). Of the ~537,000 responsive hosts, some 258,000 still had SMBv1 enabled.
One organization in France found two vulnerable hosts after scanning over 13,000 IP addresses, and Erez believes that without his tool, "finding those two needles in the haystack would have been an almost impossible mission... Here is a lesson for IT/Security departments: don't be so certain that you know your network well. Deploy a multi-layered stack of security tools for both risk analysis and real time enforcement."

wiredmikey "Ukraine is an area of great geopolitical significance -- a sort of buffer zone between NATO and Russia -- that both sides seek to influence," reports SecurityWeek. "Crimea aside, neither side wishes to be too overt with military intervention, and the result is tailor-made for modern cyber warfare... NATO's official policy towards Ukraine is to bolster its independence." As a result, NATO is providing Ukraine with cybersecurity equipment for some government institutions and authorities, which NATO secretary general Jens Stoltenberg says will enable Ukraine to investigate who is behind certain cyber-attacks, because the response to them is extremely important.

Long-time Slashdot reader jawtheshark writes: In a recent Linux Kernel Mailing List post, Linux Torvalds finishes his mail with a little poke towards a certain init system. It is a very faint criticism, compared to his usual style. While Linus has no direct influence on the "choices" of distro maintainers, his opinion is usually valued.
In a discussion about how to set rlimit default values for setuid execs, Linus concluded his email by writing, "And yes, a large part of this may be that I no longer feel like I can trust "init" to do the sane thing. You all presumably know why."

An anonymous reader quotes the Chronicle of Higher Education: A majority of Republicans and right-leaning independents think higher education has a negative effect on the country, according to a new study released by the Pew Research Center on Monday. The same study has found a consistent increase in distrust of colleges and universities since 2010, when negative perceptions among Republicans was measured at 32 percent. That number now stands at 58 percent. By comparison, 72 percent of Democrats or left-leaning Independents in the study said colleges and universities have a positive impact on the United States... In the Pew Research Center's study, distrust of colleges was strongest in the highest income bracket and the oldest age group, with approval levels of just 31 percent among respondents whose family income exceeds $75,000 a year and 27 percent among those older than 65.

From a report: The owner of the Ashley Madison adultery website said on Friday it will pay $11.2 million to settle U.S. litigation brought on behalf of roughly 37 million users whose personal details were exposed in a July 2015 data breach. Ruby Corp, formerly known as Avid Life Media Inc, denied wrongdoing in agreeing to the preliminary class-action settlement, which requires approval by a federal judge in St. Louis. Ashley Madison marketed itself as a means to help people, primarily men, cheat on their spouses, and was known for its slogan "Life is short. Have an affair."

Eugene Kaspersky, the CEO of the Russian cybersecurity software firm that bears his name, had a big American dream. From a report: He wanted his company to go beyond selling anti-virus software to consumers and small businesses and become a major vendor to the U.S. government -- one of the world's biggest buyers of cybersecurity tools. Kaspersky set up a U.S. subsidiary, KGSS, in Arlington, Virginia that would be focused on winning that business. He sponsored flashy conferences with high-profile speakers --including Michael Flynn, who was briefly President Donald Trump's national security adviser -- sought to join U.S. trade groups and even underwrote programming on National Public Radio. All of this was done to burnish Kaspersky's image and help it become an accepted vendor for the U.S. government despite its Russian roots, according to people familiar with the strategy. But Eugene Kaspersky was never able to overcome lingering suspicions among U.S. intelligence officials that he and his company were, or could become, pawns of Russia's spy agencies. Kaspersky "has never helped, nor will help, any government in the world with its cyberespionage efforts," the company said. Kaspersky's American ambitions were further eroded by the sharp deterioration in U.S.-Russia relations following Russia's invasion of Crimea in 2014, and later when U.S. intelligence agencies concluded that Russia had hacked the 2016 U.S. presidential election.

An anonymous reader shares an article: With just under half-a-million registered Apple developers in the country, India is among the most active markets when it comes to making apps for Apple's platforms, but the iPhone-maker took its time before getting involved with the local ecosystem in a meaningful way. Things started to change earlier this year, when Apple setup App Accelerator - a first-of-its-kind initiative, in namma Bengaluru, India earlier this year. More than three months later, the company's efforts are starting to shape up. Gadgets 360 spoke to many developers who have signed up for the App Accelerator, and they are pleased with how things are going so far. Registration to the App Accelerator - which is capable of hosting 500 developers per week - as well as attending the sessions, is free and open to everyone. At the App Accelerator sessions, which range between two to four hours, "evangelists" from the company are getting developers up to speed with the newest technologies, and guiding them to improve their apps and make the best out of the available resources. Developers told Gadgets 360 they get to understand what new technologies Apple specifically recommends they target, with SiriKit being one such example. That's a big and helpful change, developers say, because Indian companies often take long time in leveraging new features Apple introduces. The most crucial advice that developers have walked out of the campus with, they tell Gadgets 360, has been to reconsider their target audience. The evangelists have told them to make apps that serve to the needs of the local market, instead of focusing their energies in chasing the Western audience.

Eric Newcomer, Olivia Zaleski, Dinesh Nair, and Alex Sherman, reporting for Bloomberg: Uber shareholders and its board, led by early backer Benchmark, have discussed selling some of their shares to Japan's SoftBank and other potential investors, people familiar with the matter said. The talks represent a major turning point for the company. It has amassed more than 500 investors who fought to own a piece of the world's most-valuable startup. The fact that some of the earliest backers now want to reduce their stakes suggests the scandals and other troubles this year have taken a toll. The deal could include an injection of new money into the ride-hailing startup, the people said. They asked not to be identified discussing private deliberations. It's unclear what valuation those shares would carry or how much may be sold. Any private share sale like this would need to be approved by San Francisco-based Uber's board. Uber's former Chief Executive Officer Travis Kalanick, who remains on the board, didn't learn about Benchmark's effort to sell early shares until recently, two people familiar with the matter said. Kalanick has often opposed allowing early shareholders to sell their stakes, though the board has allowed occasional exceptions. Even though Benchmark led an investor revolt against Kalanick, at least three major shareholders said they were unaware of Benchmark's effort to sell shares as of Friday morning, three people familiar with the matter said. SoftBank, which recently launched a $93 billion technology fund, has no plans to invest in Uber, a person close to the Japanese company said. SoftBank has backed Uber's primary rivals in India, Southeast Asia and China. Some of Uber's investors would like to see the startup cut deals with overseas competitors -- as it did with Didi Chuxing in China and Yandex NV in Russia. Grab, a leading ride-hailing startup in Asia, is raising as much as $2 billion from backers including SoftBank and Didi.

Earlier this week, a white Mercedes Sprinter van began a delivery route along the streets of Fancher Creek, a residential neighborhood on the southeastern edge of Fresno, California. Its cargo? 100,000 live mosquitoes, all male, all incapable of producing offspring. As it crisscrossed Fancher Creek's 200 acres, it released its payload, piping out swarms of sterile Aedes aegypti into the air. It'll do the same thing tomorrow, and the next day, from now until the end of December. From a report: Verily, the life science's arm of Google's parent company Alphabet, has hatched a plan to release about 20 million lab-made, bacteria-infected mosquitoes upon Fresno, California -- and that's a good thing! You see, the Zika-carrying Aedes aegypti mosquito is prevalent in the area. Earlier this year, a woman contracted the first confirmed case of Zika in Fresno through sexual contact with a partner who had been traveling. Now there's the fear of the inevitable mosquito-meets-patient if we don't do something about it. Verily's plan, called the Debug Project, hopes to now wipe out this potential Zika-carrying mosquito population to prevent further infections.

dryriver writes: The Cinebench R15 benchmark is a popular tool for measuring how well CPUs cope with multithreaded compute loads. AMD's Threadripper 1950X 16 core CPU, priced at $999 according to AMD, benchmarks 41% faster in Cinebench R15 than Intel's also $999 10 core Core i9-7900X CPU. While Intel's Core i9-7900X scores 2186 points on Cinebench, AMD's Threadripper 1950X scores 3046 points. Even the cheaper 12 core $799 Threadripper 1920X is over 200 points faster in Cinebench R15 than Intel's Core i9-7900X. Intel has its own 16 core Core i9-7960X in the works, performance yet unknown, priced at $1,699, but AMD's 16 core part currently appears to be a full $700 cheaper than Intel's MSRP. It remaines to be seen who is faster in single-threaded performance -- Intel may take that crown --and what the power consumption of a fully loaded Threadripper looks like compared to its Core i9 counterpart.

Amazon Web Services has quietly dropped a controversial provision from its user agreement that essentially forced customers to agree that they could never file a patent infringement lawsuit against the public cloud vendor. From a report: The clause in the basic user agreement raised a lot of eyebrows back in 2015 after AWS asserted it as a possible defense in a patent lawsuit filed by Appistry, a former AWS customer that sued the cloud vendor over high-performance computing patents. Until sometime around February 2017, Section 8.5 of the basic agreement for using AWS included this sentence: "During and after the Term, you will not assert, nor will you authorize, assist, or encourage any third party to assert, against us or any of our affiliates, customers, vendors, business partners, or licensors, any patent infringement or other intellectual property infringement claim regarding any Service Offerings you have used.

From a report: Beatrice Kim is suing her former employer, BetterWorks, and its CEO Kris Duggan for allegedly assaulting her in a sexual manner during a company retreat. The lawsuit also implicates the performance management software startup's regional VP Matt Hart and VP of People Operations Tamara Cooksey for allowing sexual harassment in the workplace and not taking action against Duggan after the alleged assault was reported to the company. Kim is suing over sexual harassment and discrimination, assault and battery, demanding a jury trial, Kim's lawyer Conor D. Mack of Arena Hoffman LLP told TechCrunch.

Starting next week Google will overhaul its two-step verification (2SV) procedure and replace one-time codes sent via SMS with prompts shown on the user's smartphone. From a report: This change in the Google 2SV scheme comes after an increase in SS7 telephony protocol attacks that have allowed hackers to take over people's mobile phone numbers to receive one-time codes via SMS and break into user accounts. The rollout process for this feature is scheduled to start next week when Google will invite users to try mobile prompts instead of receiving a one-time code via SMS. Users need an Internet-connected smartphone to use this feature. Every time users will try to log in, Google will show a prompt on their phone asking the account owner to approve the login request. There's no one-time code that users have to fill in, and users can authorize a login request with the tap of a button.

An anonymous reader writes: A team of Afghan girls are on their way to compete in an academic robotics competition in the United States after American officials agreed to allow them to enter the country despite initially denying them visas. The reversal reportedly came at the request of U.S. President Donald Trump, Reuters reported.

An anonymous reader writes: A company is going around buying abandoned Chrome extensions from their original developers and converting these add-ons into adware. The latest case is the Particle for YouTube Chrome extension, a simple tool that allows users to change the UI and behavior of some of YouTube's standard features. Because Google was planning major changes to YouTube's UI, the extension's original author decided to retire it and create a new one. This is when the a mysterious company approached the original author and offered to buy the extension from him for a price of his choosing. The original dev says he gave them a high price, but the company agreed to pay right away, but only after the dev signed an non-disclosure agreement preventing him from talking about the company or the transaction. Soon after the sale, the company issued an update that included code for injecting rogue ads on websites such as Google, Yahoo, Bing, Amazon, eBay, and Booking.com. Users also found other Chrome extensions that were also bought by the same company and had also been turned into adware, such as "Typewriter Sounds" and "Twitch Mini Player." According to some other Chrome extension devs, there are many companies willing to pay large sums of money for taking over legitimate Chrome extensions.