A flight from Sydney to Malaysia ended up in Melbourne after the captain incorrectly entered the plane's location in its navigation system just before take-off, according to a safety investigation, whose conclusion was published this week. Mashable reports:The Air Asia pilots made several errors in entering data into the aircraft's navigation system, which caused them to follow an incorrect flight path out of Sydney, according to Australian transportation officials. While troubleshooting the incorrect flight path, the pilots were unable to fix the issue, and may have compounded it. The aircraft's systems would not allow the plane to be flown in instrument conditions and the weather also had deteriorated in Sydney by the time the pilots decided to turn back. They were directed via radar to a visual approach in Melbourne where they could land safely. The pilots did not believe the airport was located in Malaysia.

Less than a week after FAA said it was thinking about banning the Samsung Galaxy Note 7 from flights, three Australian airlines announced that it would ban passengers from using or charging Note 7 smartphones during flights. The announcement comes a week after Samsung announced that it was banning the sales of its new flagship smartphone over nearly three-dozen phones exploded worldwide. Reuters reports: Qantas, its budget unit Jetstar and Virgin Australia said they had not been directed to ban the use of the phone by aviation authorities, but did so as a precaution following Samsung's recall of the phones in 10 markets. Although customers will still be able to bring the phones on flights, the ban extends to the phones being plugged in to flight entertainment systems where USB ports are available. The recall follows reports of the 988,900 won ($885) phone igniting while charging -- an embarrassing blow to Samsung, which prides itself on its manufacturing prowess and had been banking on the devices to add momentum to a recovery in its mobile business. Samsung, the world's biggest smartphone vendor, has sold 2.5 million of the premium devices so far. "Following Samsung Australia's recall of the Samsung Galaxy Note 7 personal electronic device we are requesting that passengers who own them do not switch on or charge them in flight," a Qantas spokesman said in an emailed statement.

River Tam quotes a report from CSO Australia: Enterprise access management firm OneLogin has suffered an embarrassing breach tied to a single employee's credentials being compromised. OneLogin on Tuesday revealed the breach affected a feature called Secure Notes that allowed its users to "store information." That feature however is pitched to users as a secure way to digitally jot down credentials for access to corporate firewalls and keys to software product licenses. The firm is concerned Secure Notes was exposed to a hacker for at least one month, though it may have been from as early as July 2 through to August 25, according to a post by the firm. Normally these notes should have been encrypted using "multiple levels of AES-256 encryption," it said in a blog post. Several thousand enterprise customers, including high profile tech startups, use OneLogin for single sign-on to access enterprise cloud applications. The company has championed the SAML standard for single sign-on and promises customers an easy way to enable multi-factor authentication from devices to cloud applications. But it appears the company wasn't using multi-factor authentication for its own systems. OneLogin's CISO Alvaro Hoyos said a bug in its software caused Secure Notes to be "visible in our logging system prior to being encrypted and stored in our database." The firm later found out that an employees compromised credentials were used to access this logging system. The company has since fixed the bug on the same day it detected the bug. CSO adds that the firm "also implemented SAML-based authentication for its log management system and restricted access to a limited set of IP addresses."

"Microsoft can't tell North from South on Bing Maps," joked The Register, reporting that Microsoft's site had "misplaced Melbourne, the four-million-inhabitant capital of the Australian State of Victoria." Long-time Slashdot reader RockDoctor writes: Though they're trying to minimise it, the recent relocation of Melbourne Australia to the ocean east of Japan in Microsoft's flagship mapping application is blamed on someone having flipped a sign in the latitude given for the city's Wikipedia page. Which may or may not be true. But the simple stupidity of using a globally-editable data source for feeding a mapping and navigation system is ... "awesome" is (for once) an appropriate word.

Well, it's Bing, so at least no-one was actually using it.
"Bing's not alone in finding Australia hard to navigate," reports The Register. "In 2012 police warned not to use Apple Maps as it directed those seeking the rural Victorian town of Mildura into the middle of a desert."

The U.S. government announced plans to require some foreign travelers to provide their social media account names when entering the country -- and in June requested comments. Now the plan is being called "ludicrous," an "all-around bad idea," "blatant overreach," "desperate, paranoid heavy-handedness," "preposterous," "appalling," and "un-American," reports Slashdot reader dcblogs: That's just a sampling of the outrage. Some 800 responded to the U.S. request for comments about a proposed rule affecting people traveling from "visa waiver" countries to the U.S., where a visa is not required. This includes most of Europe, Singapore, Chile, Japan, South Korea, Australia and New Zealand... In a little twist of irony, some critics said U.S. President Obama's proposal for foreign travelers is so bad, it must have been hatched by Donald Trump.
"Travelers will be asked to provide their Twitter, Facebook, Instagram, LinkedIn, Google+, and whatever other social ID you can imagine to U.S. authorities," reports Computer World. "It's technically an 'optional' request, but since it's the government asking, critics believe travelers will fear consequences if they ignore it..."

"The incredible increase in the cost of EpiPens, auto-injectors that can stop life-threatening emergencies caused by allergic reactions, has hit home on Capitol Hill," reports CNN. Slashdot reader Applehu Akbar reports that the argument "has now turned into civil war in the US Senate": One senator's daughter relies on Epi-Pen, while another senator's daughter is CEO of Mylan, the single company that is licensed to sell these injectors in the US. On the worldwide market there is no monopoly on these devices... Is it finally time to allow Americans to go online and fill their prescriptions on the world market?
Time reports some patients are ordering cheaper EpiPens from Canada and other countries online, "an act that the FDA says is technically illegal and potentially dangerous." But the FDA also has "a backlog of about 4,000 generic drugs" awaiting FDA approval, reports PRI, noting that in the meantime prices have also increased for drugs treating cancer, hepatitis C, and high cholesterol. In Australia, where the drug costs just $38, one news outlet reports that the U.S. "is the only developed nation on Earth which allows pharmaceutical companies to set their own prices."

An anonymous reader writes: Girls given imitation babies to look after in an effort to deter teenage pregnancy could actually be more likely to get pregnant, according to a study. Researchers in Australia found 8% of girls who used the dolls were expecting by the age of 20, compared with 4% of those who did not. The number of girls having at least one abortion was also higher among girls given the dolls: 9% compared to 6%. 'Baby Think It Over' dolls were used in a Virtual Infant Parenting (VIP) programme which began in 57 schools in Western Australia in 2003. During the three-year study, published in The Lancet, 1267 girls aged 13 to 15 used the simulators -- which need to be fed and changed, while 1567 learned the normal health curriculum. The idea originated in the United States and is used in 89 countries. Researchers from the Telethon Kids Institute in Western Australia are now warning that such programmes may be a waste of public money.

An anonymous reader writes: Facebook is testing a "feature" that autoplays video clips on your feed with sound. It's not a very big test, but there's a possibility the company could roll it out to a larger group of users. The Next Web reports: "The company is currently trying two methods of getting people to watch video with sound in Australia: the aforementioned autoplaying, and an unmute button on the lower right corner of videos, like Vine videos on a desktop. The latter certainly sounds more reasonable; the last thing you want is to be checking Facebook quickly during a meeting or class, and suddenly have your phone blaring out an advert because you happened to stop on a video. Thankfully, you can disable the 'feature' from your settings, but the point is there's nothing wrong with the current opt-in approach, especially considering how many companies are embracing video captioning, and that Facebook even has its own auto-caption tool for advertisers." "We're running a small test in News Feed where people can choose whether they want to watch videos with sound on from the start," a Facebook spokesperson told Mashable Australia. "For people in this test who do not want sound to play, they can switch it off in Settings or directly on the video itself. This is one of several tests we're running as we work to improve the video experience for people on Facebook."

The Office of the Privacy Commissioner of Canada said Tuesday that the Canada-based online dating and social networking service Ashely Madison used inadequate privacy and security technology while marketing itself as a discreet and secure way for consenting adults to have affairs. CBC.ca reports: "In a report Tuesday, the privacy watchdog says the Toronto-based company violated numerous privacy laws in Canada and abroad in the era before a massive data breach exposed confidential information from their clients to hackers. The hack stole correspondence, identifying details and even credit card information from millions of the site's users. The resulting scandal cost the company about a quarter of its annual revenues from irate customers who demanded refunds and cancelled their accounts. Working with a similar agency in Australia, the privacy group says the company knew that its security protocols were lacking but didn't do enough to guard against being hacked. The company even adorned its website with the logo of a 'trusted security award' -- a claim the company admits it fabricated." The report found that "poor habits such as inadequate authentication processes and sub-par key and password management practices were rampant at the company" and that "much of the company's efforts to monitor its own security were 'focused on detecting system performance issues and unusual employee requests for decryption of sensitive user data.'" What's more is that Ashley Madison continued to store personal information of its users even after some of which had deleted or deactivated their account(s). These people then had their information included in databases published online after the hack.

Around 65% of the internet's one zettabyte of global traffic uses SSL/TLS encryption -- but Slashdot reader River Tam shares an article recalling last August when 910 million web browsers were potentially exposed to malware hidden in a Yahoo ad that was hidden from firewalls by SSL/TLS encryption: When victims don't have the right protection measures in place, attackers can cipher command and control communications and malicious code to evade intrusion prevention systems and anti-malware inspection systems. In effect, the SSL/TLS encryption serves as a tunnel to hide malware as it can pass through firewalls and into organizations' networks undetected if the right safeguards aren't in place. As SSL/TLS usage grows, the appeal of this threat vector for hackers too increases.

Companies can stop SSL/TLS attacks, however most don't have their existing security features properly enabled to do so. Legacy network security solutions typically don't have the features needed to inspect SSL/TLS-encrypted traffic. The ones that do, often suffer from such extreme performance issues when inspecting traffic, that most companies with legacy solutions abandon SSL/TLS inspection.

Motherboard is reporting that Australian authorities hacked Tor users in the United States as part of a child pornography investigation. The revelation comes through recently-filed US court documents. The incident underscores a trend where law enforcement around the world are increasingly pursuing targets overseas using hacking tools, raising legal questions around agencies' reach. From the report: In one case, Australian authorities remotely hacked a computer in Michigan to obtain the suspect's IP address. "The Love Zone" was a prolific dark web child abuse site, where users were instructed to upload material at least once a month to maintain access to the forum. By July 2014, the site had over 29,000 members, according to US court documents, constituting what the US Department of Justice described as a "technologically sophisticated conspiracy." In 2014, Queensland Police Service's Task Force Argos, a small, specialised unit focused on combating child exploitation crimes, identified the site's Australian administrator in part because of a localized greeting he signed messages with. The unit quietly took over his account, and for months ran the site in an undercover capacity, posing as its owner. Task Force Argos' logo includes a scorpion, and the tagline "Leave No Stone Unturned." Because The Love Zone was based on the dark web, users typically connected via the Tor network, masking their IP addresses even from the law enforcement agents who were secretly in control of the site. Task Force Argos could see what the users were viewing, and what pages they were visiting, but not where they were really connecting from.

Slashdot reader River Tam explains the crash of Australia's online census site, citing the account of a security researcher who says IBM and the Australian Bureau of Statistics "were offered DDoS prevention services from their upstream provider...and said they didn't need it." From an article on CSO: The ABS and IBM gambled on a plan to ask its upstream network provider to block traffic from outside Australia in the event that a denial-of-service attack was detected... Offshore traffic to the site was blocked in line with the plan, however, another attack, for which the ABS had no contingency to repel, was directed at it from within Australia. The attack crippled the firewall and the census site's operators opted to restart it and fall back to a secondary firewall. However, they forgot to check that it had the same configuration as the primary firewall. That crippled the census site.

In an unfortunate confluence of events, IBM's security warning systems started flagging some unusual activity, which indicated that information on the ABS servers was heading offshore. The site's operators, thinking the DDoS activity was a distraction, interpreted the alarms as a successful hack...these were little more than benign system logs and the technical staff monitoring the situation poorly understood it. Amid the confusion they naturally erred on the side of caution, [and] decided to pull the plug on the site...

An anonymous reader writes: What do spies use to chat online? A terribly ugly Windows programme. At least, that's what the Five Eyes intelligence alliance (made up of the US, UK, Australia, New Zealand and Canada) was using back in 2003, according to a newly released Snowden document. "The Five-Eyes SIGINT [signals intelligence] Directors will soon be using a new tool to enhance their collaboration on subjects ranging from current intelligence objectives to future collection planning," reads an issue of SID Today, the NSA's internal newsletter, dating from September 2003. InfoWorkSpace (IWS), as the tool is called, allowed text chat, audio conferencing, shared screen views, and virtual whiteboards, the newsletter explains. It adds that, at the time, some 4,000 NSA and Five Eyes employees were already using IWS to work on a number of topics, such as international terrorism, real-time collection coordination, and Operation Enduring Freedom, the term given to operations in Afghanistan from 2001 to 2014. The newsletter announcement refers to SIGINT Directors gaining access to the tool. Another Snowden document published by The Intercept notes that senior officials held their first virtual meeting with IWS around December 2003, but that "GCHQ was unable to attend due to a computer failure."

The closure of Silk Road -- a marketplace where internet users could purchase drugs and other illegal goods -- in 2013 has had little to no effect on drug sales. According to a new report from RAND, online drug sales have tripled since the site was shut down. NBC News reports: "Since then, an estimated 50 'cryptomarkets and vendor shops where vendors and buyers find each other anonymously to trade illegal drugs, new psychoactive substances, prescription drugs and other goods and services,' have emerged to fill the void, according to the report. The research, which was commissioned by the Netherlands Ministry of Security and Justice, examined data from January and found dealers in the United States had the largest market share with 35.9 percent, followed by the United Kingdom at 16.1 percent and Australia at 10.6 percent. Marijuana was the top seller in January, accounting for 33 percent of illicit drug sales online, followed by prescription medication at 19 percent and stimulants at 18 percent."

Heart44 writes: News sites are reporting that the Australian census website has been shut down until further notice. This happened on census night, Tuesday (Australian time), August 9th, 2016. This is the first attempt at an online census where [the internet] is the default data collection method. You had to call an often busy number to get a paper form. This is on top of a long running controversy that the Australian Bureau of Statistics will keep the names and addresses of everyone for five years. I presume more useful links will appear over time. "The site was targeted by four denial of service (DoS) attacks," chief statistician David Kalisch told ABC radio. The Sydney Morning Herald reports: "The first three caused minor disruptions and did not stop more than two million census forms from being 'successfully submitted and safely stored,' he said. But the site was shut down after a 'gap' in the system's security measures was found during a fourth attack (AEST), Mr Kalisch said. 'After the fourth attack, which took place just after 7:30pm [on Tuesday AEST], the ABS took the precaution of closing down the system to ensure the integrity of the data,' Mr Kalisch said. 'I can certainly reassure Australians the data they provided is safe,' he said."

UPDATE 8/09/16: Many reports are contradicting Kalisch's claim that the website was shut down from DDoS attacks. User @mhackling on Twitter tweeted a screenshot of Digital Attack Map showing "nothing unusual DDoS wise for Australia and yesterday."

Here's another report reaffirming that playing online video games doesn't necessarily hinder one with their grades. According to an analysis of data from over 12,000 high school students in Australia, children who play online video games tend to do better in academic science, maths and reading tests. The study says kids who played online games almost every day scored 15 points above average in maths and reading tests and 17 points above average in science. "The analysis shows that those students who play online video games obtain higher scores on Pisa (Program for International Student Assessment -- internationally recognized tests that are administered by the Organisation for Economic Cooperation and Development (OECD)) tests, all other things being equal," said Alberto Posso, from the Royal Melbourne Institute of Technology whp analyzed the data. "When you play online games you're solving puzzles to move to the next level and that involves using some of the general knowledge and skills in maths, reading and science that you've been taught during the day." The Guardian reports: The cause of the association between game playing and academic success is not clear from the research. It is possible that children who are gifted at maths, science and reading are more likely to play online games. Alternatively, it could be that more proficient students work more efficiently, and therefore have more free time, making online gaming a marker of possible academic ability rather than something that actively boosts performance. Posso also looked at the correlation between social media use and Pisa scores. He concluded that users of sites such as Facebook and Twitter were more likely to score 4% lower on average, and the more frequent the social networking usage, the bigger the difference. 78% of the teenagers said they used social networks every day. Other studies have found a link between heavy users of social networking and a low attention span, which is also linked to poorer academic performance, but the evidence is less than conclusive.

It's already underway just 364 miles south of Florida, according to the Associated Press. "The first wave of genetically modified mosquitoes were released Wednesday in the Cayman Islands as part of a new effort to control the insect that spreads Zika and other viruses," according to an article shared by Slashdot reader Okian Warrior: Genetically altered male mosquitoes, which don't bite but are expected to mate with females to produce offspring that die before reaching adulthood, were released in the West Bay area of Grand Cayman Island, according to a joint statement from the Cayman Islands Mosquito Research and Control Unit and British biotech firm Oxitec.
"What could possibly go wrong?" asks The Atlantic, citing history's great pest-control fails in Hawaii and Australia. But a similar release is already being considered in the Florida Keys, though Accuweather reports it apparently depends on the results of a November referendum which could also "affect the likelihood of Oxitec trials taking place in other parts of the United States."

An anonymous reader quotes a report from NPR: Using specialized X-ray imaging, a team of researchers in Australia has revealed a striking painting of a woman's face hidden under French Impressionist Edgar Degas' Portrait of a Woman. The researchers believe the auburn-haired woman in the hidden work -- which they also attribute to Degas -- is Emma Dobigny, who was reportedly one of Degas' favorite subjects and modeled for him in 1869 and 1870. "Degas painted directly on the underlying portrait with no intermediate ground paint layer using exceptionally thin paint layers, thus little pigment is present to provide hiding power," the researchers explained in the journal Nature. "The hiding power of paint layers often decreases as oil paintings age." Even as the traces of a ghostly form emerged over the course of decades, conventional imaging technology could only provide hints of what the hidden portrait looked like. Now, an enhanced process known as X-ray fluorescence elemental mapping gives a far better picture. The technique allowed the researchers to scan for the individual elements -- such as iron, zinc and copper -- found in different colors of paint. The team said the maps "can be used to deduce pigment use based on the elements observed within the context of the painting." For example, "Fe and Mn are co-located in the hidden sitter's hair [...] strongly suggesting the use of the brown pigment umber." The researchers detected cobalt in the face, and deduced that it is "probably present as a blue pigment, which is useful in defining flesh tones." This chart shows maps of elements the researchers tested in an effort to create a representation of the hidden work.

An anonymous reader writes: Next week over 20 million Australians will take part in a mandatory government census. While such data-gathering exercises are usually uncontroversial, some significant changes to the process of collecting the 2016 data -- and in particular the way in which personally-identifying information will be retained for long periods (possibly indefinintely) -- have left many privacy advocates and others calling for a mass boycott. The Australian government's response has been to try to calm fears by promising that it will secure the census data, keep personally identifying data separate from statistical data, and only use each in a responsible way. It has, at the same time reminded Australian citizens that the fines for non-participation in the census have recently been radically increased (now $1800 for failure to submit a form; or $180/day for late submissions).Further reading: Australians threaten to take leave of their census.

"Does your web browser have a unique fingerprint? If so your web browser could be tracked across websites without techniques such as tracking cookies..." warns a new site created by the University of Adelaide and ACEMS, adding "the anonymization aspects of services such as Tor or VPNs could be negated if sites you visit track you using your browser fingerprint." AnonymousCube contacted Slashdot about their free browser fingerprinting test suite: On the site you can see what data can be used to track you and how unique your fingerprint is. The site includes new tests, such as detecting software such as Privacy Badger, via how social media buttons are disabled, and CSS only (no JavaScript or flash) tests to get screen size and installed fonts.
If you're serious about privacy, you might want to test the uniqueness of your browser's fingerprint.