Orome1 writes: A default setting in Google Chrome, which allows it to download files that it deems safe without prompting the user for a download location, can be exploited by attackers to mount a Windows credential theft attack using specially-crafted SCF shortcut files, DefenseCode researchers have found. What's more, for the attack to work, the victim does not even have to run the automatically downloaded file. Simply opening the download directory in Windows File Explorer will trigger the code icon file location inserted in the file to run, and it will send the victim's username, domain and NTLMv2 password hash to a remote SMB server operated by the attackers.

An anonymous reader writes: Time magazine ran a cover story about "a dangerous new route for antidemocratic forces" -- social media. "Using these technologies, it is possible to undermine democratic government, and it's becoming easier every day," says Rand Waltzman of the Rand Corp., who ran a major Pentagon research program to understand the propaganda threats posed by social media technology." The article cites current and former FBI and CIA officials who now believe Russia's phishing emails against politicians were "just the most visible battle in an ongoing information war against global democracy." They cite, for example, a March report by U.S. counterintelligence which found "Russians had sent expertly tailored messages carrying malware to more than 10,000 Twitter users in the Defense Department." Each message contained links tailored to the interests of the recipient, but "When clicked, the links took users to a Russian-controlled server that downloaded a program allowing Moscow's hackers to take control of the victim's phone or computer -- and Twitter account...

"In 2016, Russia had used thousands of covert human agents and robot computer programs to spread disinformation referencing the stolen campaign emails of Hillary Clinton, amplifying their effect. Now counterintelligence officials wondered: What chaos could Moscow unleash with thousands of Twitter handles that spoke in real time with the authority of the armed forces of the United States?" The article also notes how algorithms now can identify hot-button issues and people susceptible to suggestion, so "Propagandists can then manually craft messages to influence them, deploying covert provocateurs, either humans or automated computer programs known as bots, in hopes of altering their behavior. That is what Moscow is doing, more than a dozen senior intelligence officials and others investigating Russia's influence operations tell Time."
The article describes a Russian soldier in the Ukraine pretending to be a 42-year-old American housewife. Meanwhile, this week Time's cover shows America's White House halfway-covered with Kremlin-esque spires -- drawing a complaint from the humorists at Mad magazine, who say Time copied the cover of Mad's December issue.

After Thursday's net neutrality vote, two security guards pinned a reporter against a wall until FCC Commissioner Michael O'Rielly had left the room, the Los Angeles Times reports. The Writers Guild of America calls the FCC's 2-to-1 vote to initiate a repeal of net neutrality rules a "war on the open internet," according to The Guardian. But the newspaper now predicts that online activists will continue their massive campaign "as the month's long process of reviewing the rules begins." The Hill points out that Mozilla is already hiring a high-profile tech lobbyist to press for both cybersecurity and an open internet, and in a blog post earlier this week the Mozilla Foundation's executive director sees a larger movement emerging from the engagement of millions of internet users. Today's support for net neutrality isn't the start of the Internet health movement. People have been standing up for an open web since its inception -- by advocating for browser choice, for open source practices, for mass surveillance reform. But net neutrality is an opportunity to propel this movement into the mainstream... If we make Internet health a mainstream issue, we can cement the web as a public resource. If we don't, mass surveillance, exclusion and insecurity can creep into every aspect of society. Hospitals held hostage by rogue hackers can become the status quo.
Meanwhile, The Guardian reports that it's not till the end of the FCC's review process that "a final FCC vote will decide the future of internet regulation," adding that however they vote, "court challenges are inevitable."

Would you let Delta airlines scan your face if it meant you could skip the line to check-in your baggage? An anonymous reader quotes CNN: Delta is testing a face-scanning kiosk for baggage check... It uses facial recognition technology to match your identity to your passport photo. You tag your own bags, pay the fee and drop your luggage on a conveyor belt... Delta will test four of the machines at Minneapolis-St. Paul International Airport this summer. The airline spent $600,000 on the four kiosks.
A senior staff attorney at the EFF warns this could be a slippery slope -- at what point this morphs into airline surveillance? But a Delta spokerspeson insists the images won't be stored, that they're complying with privacy laws, and that the kiosks could double the number of passengers whisking through their check-in procedures.

The long-awaited modern OS/2 distribution from Arca Noae was released Monday. martiniturbide writes: ArcaOS 5.0 is an OEM distribution of IBM's discontinued OS/2 Warp operating system. ArcaOS offers a new set of drivers for ACPI, network, USB, video and mouse to run OS/2 in newer hardware. It also includes a new OS installer and open source software like Samba, Libc libraries, SDL, Qt, Firefox and OpenOffice... It's available in two editions, Personal ($129 with an introductory price of $99 for the first 90 days [and six months of support and maintenance updates]) and Commercial ($239 with one year of support and maintenance).

The OS/2 community has been called upon to report supported hardware, open source any OS/2 software, make public as much OS/2 documentation as possible and post the important platform links. OS2World insists that open source has helped OS/2 in the past years and it is time to look under the hood to try to clone internal components like Control Program, Presentation Manager, SOM and Workplace Shell.
By Tuesday Arca Noae was reporting "excessive traffic on the server which is impacting our ordering and delivery process," though the actual downloads of the OS were unaffected, the server load issues were soon mitigated, and they thanked OS/2 enthusiasts for a "truly overwhelming response."

An anonymous reader quotes a report from The Guardian: It was designed as an impregnable deep-freeze to protect the world's most precious seeds from any global disaster and ensure humanity's food supply forever. But the Global Seed Vault, buried in a mountain deep inside the Arctic circle, has been breached after global warming produced extraordinary temperatures over the winter, sending meltwater gushing into the entrance tunnel. The vault is on the Norwegian island of Spitsbergen and contains almost a million packets of seeds, each a variety of an important food crop. When it was opened in 2008, the deep permafrost through which the vault was sunk was expected to provide "failsafe" protection against "the challenge of natural or man-made disasters". But soaring temperatures in the Arctic at the end of the world's hottest ever recorded year led to melting and heavy rain, when light snow should have been falling. "It was not in our plans to think that the permafrost would not be there and that it would experience extreme weather like that," said Hege Njaa Aschim, from the Norwegian government, which owns the vault. "A lot of water went into the start of the tunnel and then it froze to ice, so it was like a glacier when you went in," she told the Guardian. Fortunately, the meltwater did not reach the vault itself, the ice has been hacked out, and the precious seeds remain safe for now at the required storage temperature of -18C. But the breach has questioned the ability of the vault to survive as a lifeline for humanity if catastrophe strikes.

sciencehabit quotes a report from Scientific Magazine: DNA is better known, but many researchers today believe that life on Earth got started with its cousin RNA, since that nucleic acid can act as both a repository of genetic information and a catalyst to speed up biochemical reactions. But those favoring this "RNA world" hypothesis have struggled for decades to explain how the molecule's four building blocks could have arisen from the simpler compounds present during our planet's early days. Now chemists have identified simple reactions that, using the raw materials on early Earth, can synthesize close cousins of all four building blocks. The resemblance isn't perfect, but it suggests scientists may be closing in on a plausible scenario for how life on Earth began. The study has been published in the journal Nature.

New submitter LCooke writes: A international research team led by the University of Durham thinks a mysterious cold spot in the universe could offer evidence of a parallel universe. The cold spot could have resulted after our universe collided with another. Physicist Tom Shanks said, [...] "the cold spot might be taken as the first evidence for the multiverse -- and billions of other universes may exist like our own." From the report via Inhabitat: "NASA first discovered the baffling cold spot in 2004. The cold spot is 1.8 billion light years across and, as you may have guessed, colder than what surrounds it in the universe. Scientists thought perhaps it was colder because it had 10,000 less galaxies than other regions of similar size. They even thought perhaps the cold spot was just a trick of the light. But now an international team of researchers think perhaps the cold spot could actually offer evidence for the concept of a multiverse. The Guardian explains an infinite number of universes make up a multiverse; each having its own reality different from ours. These scientists say they've ruled out the last-ditch optical illusion idea. Instead, they think our universe may have collided with another in what News.com.au described as something like a car crash; the impact could have pushed energy away from an area of space to result in the cold spot." The study has been published in the journal Monthly Notices of the Royal Astronomical Society.

According to a new study this week from financial services firm Cornerstone Capital Group, between 6 million and 7.5 million retail jobs are at risk of being replaced over the course of the next 10 years by some form of automation. "That represents at least 38% of the current retail work force, which consists of 16 million workers," reports CNN. "Retail could actually lose a greater proportion of jobs to automation than manufacturing has, according to the study." From the report: That doesn't mean that robots will be roving the aisles of your local department store chatting with customers. Instead, expect to see more automated checkout lines instead of cashiers. This shift alone will likely eliminate millions of jobs. "Cashiers are considered one of the most easily automatable jobs in the economy," said the report. And these job losses will hit women particularly hard, since about 73% of cashiers are women. There will also be fewer sales jobs, as more and more consumers use in-store smartphones and touchscreen computers to find what they need, said John Wilson, head of research at Cornerstone. There will still be some sales people on the floor, but just not as many of them. Rising wages are also helping to drive automation, as state and city governments hike their minimum wages. Additionally, several major retailers including Walmart, the nation's largest employer, have increased wages in order to find and retain the workers they need. The increased competition from e-commerce is also a factor, since it requires retailers to be as efficient as possible in order to compete.

An anonymous reader quotes a report from Motherboard: Uber drivers have been complaining that the gap between the fare a rider pays and what the driver receives is getting wider. After months of unsatisfying answers, Uber is providing an explanation: It's charging some passengers more because it needs the extra cash. The company detailed for the first time in an interview with Bloomberg a new pricing system that's been in testing for months in certain cities. On Friday, Uber acknowledged to drivers the discrepancy between their compensation and what riders pay. The new fare system is called "route-based pricing," and it charges customers based on what it predicts they're willing to pay. It's a break from the past, when Uber calculated fares using a combination of mileage, time and multipliers based on geographic demand. Daniel Graf, Uber's head of product, said the company applies machine-learning techniques to estimate how much groups of customers are willing to shell out for a ride. Uber calculates riders' propensity for paying a higher price for a particular route at a certain time of day. For instance, someone traveling from a wealthy neighborhood to another tony spot might be asked to pay more than another person heading to a poorer part of town, even if demand, traffic and distance are the same.

Martin S. writes: Theresa May, the leader of the UK Conservative Party has pledged to create new internet that would be controlled and regulated by government on re-election. An early lead in the polls appears to be slipping but not slowly enough to change the result. Social Media has rapidly become an intense political battlefield. Known as #Mayhem in some circles, but seemingly able to command significant support from new and old media. Also, applying new social media analytics. According to the manifesto, the plans will allow Britain to become "the global leader in the regulation of the use of personal data and the internet." It states, "Some people say that it is not for government to regulate when it comes to technology and the internet... We disagree."

An anonymous reader quotes a report from Reuters: BlackBerry is working with at least two automakers to develop a security service that would remotely scan vehicles for computer viruses and tell drivers to pull over if they were in critical danger, according to a financial analyst. The service, which would also be able to install security patches to an idle car, is being tested by luxury automakers Aston Martin and Range Rover. The service could be launched as early as next year, generating about $10 a month per vehicle for BlackBerry, according to Papageorgiou, who has followed BlackBerry for more than 15 years. Vehicles increasingly rely on dozens of computers that connect to each other as well as the internet, mobile networks and Bluetooth communications systems that make them vulnerable to remote hacks.

rmdingler writes: "Sweden is dropping its investigation into WikiLeaks founder Julian Assange on rape allegations, according to a prosecution statement released Friday," reports CNN. "Assange, who has always denied wrongdoing, has been holed up at the Ecuadorian Embassy in London since 2012, in an effort to avoid a Swedish arrest warrant." Despite Friday's announcement, he's unlikely to walk out of the embassy imminently. There is no apparent change in the risk of being detained in the west, particularly in the U.S., but it's definitely a win for Assange. Joshua.Niland adds: The pressure on Julian Assange may have lifted ever so slightly with Swedish prosecutors dropping their investigation into the allegations of rape. A brief statement ahead of a press conference by the prosecutor later on Friday said: "Director of Public Prosecution, Ms Marianne Ny, has today decided to discontinue the investigation regarding suspected rape (lesser degree) by Julian Assange." This will not likely deter the United States from pursuing their own charges against him for publishing tens of thousands of military documents leaked by Army whistleblower Chelsea Manning. After describing the development as "an important victory," Assange said, "[...] it by no means erases seven years of detention without charge under house arrest and almost five years here in this embassy without sunlight. Seven years without charge while my children grow up without me. That is not something I can forgive. It is not something I can forget."

Uber's general counsel Salle Yoo has warned Anthony Levandowski that if he doesn't return the files he's accused of stealing from Google's self-driving car unit and using them to develop similar technology at Uber, or open deny taking them, he could be fired. Gizmodo reports: Uber's general counsel Salle Yoo warned Levandowski in a letter sent Monday and made public last night that, if he didn't return the stolen files or openly deny taking them, he could be fired. The letter is a result of a court order issued Monday, and Levandowski has until the end of the month to comply. "We understand that this letter requires you to turn over information wherever located, including but not limited to, your personal devices, and to waive any Fifth Amendment protection you may have," Yoo wrote. "While we have respected your personal liberties, it is our view that the Court's Order requires us to make these demands of you." Despite the allegations against him, Levandowski's job at Uber has been protected so far by his reputation as a rising star in the self-driving industry and his close friendship with CEO Travis Kalanick, who called Levandowski his brother from another mother. However, Yoo's letter hints that the tide at Uber may be turning against Levandowsk -- in addition to demanding he return Waymo's documents, Yoo also asks Levandowski to return any Uber files he may have and to only use Uber-issued devices for work, where his actions will be monitored. "If you have not fully complied with our prior request to return all Uber-owned documents in your possession, custody, or control, you must immediately return all such documents to us," Yoo wrote.