The New York Times, citing senior law enforcement and intelligence officials, reports today that the FBI secretly arrested a National Security Agency contractor in recent weeks (Editor's note: the link could be paywalled; alternate source). The newspaper adds that the FBI is currently investigating whether the contractor (identified as male) stole and disclosed highly classified computer codes developed to "hack into the networks of foreign governments." From the report: The theft raises the embarrassing prospect that for the second time in three years an insider has managed to steal highly damaging secret information from the N.S.A. In 2013, Edward J. Snowden, who was also a contractor for the agency, took a vast trove of documents that were later passed to journalists, exposing N.S.A. surveillance programs in the United States and abroad. The information believed stolen by this contractor -- who like Mr. Snowden worked for the consulting firm Booz Allen Hamilton, which is responsible for building and operating many of the agency's most sensitive cyberoperations -- appears to be different in nature from Mr. Snowden's theft.

prisoninmate writes: Softpedia reports that there's a new project on GitHub, called alwsl, which promises to let you install the Arch Linux operating system on Windows 10's new WSL (Windows Subsystem for Linux) feature, which allows users to run native Linux command-line tools directly on the Windows operating system alongside their modern desktop and apps. For example, Canonical and Microsoft brought Bash on Ubuntu on Windows using the new WSL functionality. For now, the alwsl project, which is developed by a group of German developers that call themselves "Turbo Developers," offers a .bat file that you can use to install Arch Linux on a WSL (Windows Subsystem for Linux) host, but the software is in developer preview stage. The first stable release, alwsl 1.0 will be able not only to install Arch Linux on the Windows Subsystem for Linux host in Windows 10 editions that support it, but also to create and manage users and snapshots. Also, it looks like it will get rolling upgrades just like a normal Arch Linux installation gets. The final release is expected to launch on December 2016, and you can monitor its development progress on GitHub.

Reuters reported on Tuesday that Yahoo last year secretly built a custom software program to search all of its customers' incoming emails for specific information provided by U.S. intelligence officials. When The Intercept reached out to Yahoo for an official comment and explanation, the company offered a non-denial response after 20 hours since Reuters's report, a report said. (If a report is inaccurate, the company says so explicitly. Non-denial is something you give when you are caught off guard and things reported are true.) From the report: From Yahoo's PR firm, "The article is misleading. We narrowly interpret every government request for user data to minimize disclosure. The mail scanning described in the article does not exist on our systems." This is an extremely carefully worded statement, arriving roughly 20 hours after the Reuters story first broke. That's a long time to craft 29 words. It's unclear as well why Yahoo wouldn't have put this statement out on Tuesday, rather than responding, cryptically, that they are "a law abiding company, [that] complies with the laws of the United States." But this day-after denial isn't even really a denial: The statement says only that the article is misleading, not false. It denies only that such an email scanning program "does not" exist -- perhaps it did exist at some point between its reported inception in 2015 and today. It also pins quite a bit on the word "described" -- perhaps the Reuters report was overall accurate, but missed a few details. And it would mean a lot more for this denial to come straight from the keyboard of a named executive at Yahoo -- perhaps Ron Bell, the company's general counsel -- rather than a "strategic communications firm."Reuters reported that Yahoo's decision has prompted questions in Europe whether EU citizens' data had been compromised, and this could result in derailing a new trans-Atlantic data sharing deal.