49681267
submission
dstates writes:
A team of researchers at the University of Michigan has realeased Zmap, a tool that allows an ordinary server to scan every address on the Internet in just 45 minutes. This is a task that used to take months, but now is accessible to anyone with a fast internet connection. In their announcement Friday, at the Usenix security conference in Washington they provide interesting examples tracking HTTPS deployment over time, the effects of Hurricane Sandy on Internet infrastructure, but also rapid identification of vulnerable hosts for security exploits. As Washington Post Blog discussing the work shows examples of the rate with which of computers on the Internet have been patched to fix Universal Plug and Play, “Debian weak key” and “factorable RSA keys” vulnerabilities. Unfortunately, in each case it takes years to deploy patches and in the case of UPnP devices, they found 2.56 million (16.7 percent) devices on the Internet and not yet upgraded years after the vulnerability had been described. Zero day exploits just became zero hour.
48365843
submission
dstates writes:
For most of Friday, police and firefighters in Detroit were forced to operate without their usual dispatch radio when the emergency dispatch system failed. The radio system used for communication between 911 dispatchers and Detroit's police, fire and EMS crews went down around 5:30 a.m. Friday morning, causing a backlog of hundreds of calls and putting public safety at risk. Michigan State Police allowed Detroit's emergency system to use the state's communication towers, but access was restricted to top priority calls out of fear of overloading the State system.
More than 60 priority 1 calls and more than 170 non-emergency calls were backed up. With no dispatch to communicate if something went wrong and backup was needed, police were forced to send officers out in pairs for safety concerns on priority 1 calls.
Detroit’s new police chief, James Craig, says he's "appalled" that a redundant system did not kick in. The outage occurred only days after Craig took office. The $131 million dollar Motorola system was installed in 2005 amid controversy over its funding. Spokesmen for Motorola said parts of the system were regularly maintained but acknowledged that backup systems had not been tested in the past two years. They said the problem was a hardware glitch in the link between dispatch and the individual radios. As of 9 p.m. Friday Motorola spokesman said that the system was stable and that the company would continue troubleshooting next week.
44188653
submission
dstates writes:
SAM (Systems for Awards Management) is a financial management system that the US government requires all contractors and grantees to use. This system has recently been rolled out to replace the older CCR system. Last night, thousands of SAM users received the following message:
"Dear SAM user
The General Services Administration (GSA) recently has identified a security vulnerability in the System for Award Management (SAM), which is part of the cross-government Integrated Award Environment (IAE) managed by GSA. Registered SAM users with entity administrator rights and delegated entity registration rights had the ability to view any entity’s registration information, including both public and non-public data at all sensitivity levels."
From March 8 to 10, any registered user who searched the system could view confidential information including account and social security numbers for any other user of the system. Oops! The Government Services administration says that they have fixed the problem, but this is a serious black eye for the Fed.
43719703
submission
dstates writes:
ProPublica, the award winning public interest journalism group and frequently cited Slashdot source has published an interesting guide to app technology for journalism and a set of data and style guides. Journalism presents unique challenges with potentially enormous but highly variable site traffic, the need to serve a wide variety of information, and most importantly, the need to quickly develop and vet interesting content, and ProPublica serves lots of data sets in addition to the news. They are also doing some cool stuff like using AI to generate specific narratives from tens of thousands of database entries illustrating how school districts and states often don't distribute educational opportunities to rich and poor kids equally. The ProPublica team focuses on some basic practical issues for building a team, rapidly and flexibly deploying technology and insuring that what they serve is correct. A great news app developer needs three key skills, the ability to do journalism, design acumen and the ability to write code quickly, and the last is the easiest to teach. To build a team they look to their own staff rather than competing with Google for CS grads. Most news organizations use either Ruby on Rails or Python/Django, but more important than which specific technology you choose, pick a server-side programming language and stick to it. Cloud hosting provides news organizations with incredible flexibility (like how do you increase your capacity ten fold for a few days around the election and then scale back the day after), but they're not as fast as real servers, and cloud costs can scale quickly relative to real servers. Maybe a news app is not the most massive"big data" application out there, but where else can you find the challenge of millions of users checking in several times a day for the latest news, and all you need to do is sort out which of your many and conflicting sources are providing you with straight information? Oh, and if you screw up, it will be very public.
43179351
submission
dstates writes:
Water is a huge global security issue. To understand the middle east, you need to understand that the Golan Heights provides a significant amount of the water used in Israel. Focusing on conflicts and politics means that huge volumes of valuable water are being wasted in the Middle East, and this will only exacerbate future conflicts. Water is a serious issue between India and China. And then there is Africa.US food exports are in effect exporting irrigation water drawn from the Ogallala aquifer. Fracking trades water for energy, and lack of water limits fracking in many parts of th world. Think about it.
42306571
submission
dstates writes:
The Department of Health and Human Services has released newly revised rules for the Health Information Privacy and Accountability Act (HIPAA) to insure patient access to electronic copies of their electronic medical records. Several years ago, there was a great deal of excitement about personalized health information management (e.g. Microsoft HealthVault and Google Health). Unfortunately, patients found it difficult to obtain their medical records from providers in formats that could easily be imported. Personalized health records were time consuming and difficult to maintain so these initiatives have not lived up to their expectations (e.g. Google Health has been discontinued). The new rules should address this directly and hopefully will revitalized interest personal health information management.
The new HIPAA rules also greatly strengthen patient privacy, the ability of patients to control who sees their medical information, and increases the penalties for leaking medical records information. “Much has changed in health care since HIPAA was enacted over fifteen years ago,” said HHS Secretary Kathleen Sebelius. “The new rule will help protect patient privacy and safeguard patients’ health information in an ever expanding digital age.”
42106211
submission
dstates writes:
In just 6 weeks an MIT researcher created smart ice cubes that monitor your drinking. After an alcohol induced blackout motivated a bit of introspection, Dhairya Dand pulled together a coin cell battery, an ATtiny microcontroller, and an IR transceiver molded into gelatin to create self-aware glowing ice-cubes. The cubes glow and beat to the ambient music, but more importantly, they know how fast and how much you are drinking, and they change color from green to orange to finally red as you reach your safe limit. If things go too far, the ice cubes can connect to your smartphone and send a text message for a friend come get you. Of course, you have to remember not to swallow them. Interesting implications for addressing the input side of dieting, weight loss and moderation.
41072773
submission
dstates writes:
Retraction Watch reports that fake reviewer information was placed in Elsevier's peer review database allowing unethical authors to review their own or colleagues manuscripts. As a result, 11 scientific publications have been retracted. The hack is particularly embarrassing for Elsevier because the commercial publisher has been arguing that the quality of its review process justifies its restrictive access policies and high costs of the journals it publishes.
41062419
submission
dstates writes:
The FCC is considering one of the biggest regulatory changes in decades: allowing a newly available chunk of wireless spectrum to be leased by different users at different times and places, rather than being auctioned off to one high bidder. The plan is to open a new WiFi with spectrum in the 3.550 to 3.650 gigahertz band now used by radar systems. Under the proposed rule to be voted on Wednesday, users could reserve pieces of that spectrum in different regions and at different time managed by a central database. Spectrum sharing is a dramatic change with a potential to make bandwidth accessible to many users. The plan has met with mixed reviews from the cellular carriers.
39637917
submission
dstates writes:
Want a good job in IT? Detroit of all places may be the place to be. GM is bringing IT development back in house to speed innovation. Among other initiatives, a self driving Cadillac is planned by mid decade. Ford is also actively developing driver assist technology and is betting big on voice recognition. Ann Arbor has thousands of smart cars wirelessly connected on the road. Think about all those aging baby boomers with houses in the burbs and no desire to move as their vision and reflexes decline. The smart car is a huge market. Seriously, Detroit and SE Michigan have good jobs, great universities, cheap housing and easy access to great sports and outdoors activities.
39369455
submission
dstates writes:
One Laptop Per Child reports encouraging results of a bold experiment to reach the millions of students worldwide who have no access to primary school. OLPC delivered tablets to two Ethiopian villages in unmarked boxes without instructions or instructors. Within minutes the kids were opening the boxes and figuring out how to use the Motorola Zoom tablets, within days they were playing alphabet songs and withing a few months how to hack the user interface to enable blocked camera functionality. With the Kahn Academy and others at the high school level and massive open online courses at the college level, the teaching profession is under assault as never before.
35431875
submission
dstates writes:
An industry has grown up around patents guaranteeing exclusive access to testing of mutations in specific genes, but recently the Supreme Court rejected a biotechnology patent saying laws of nature cannot be patented, and threw the issue of patents on genes back to the lower courts. The Court of Appeals is now preparing to hear arguments on whether genes can be patented. The results will have major implications. On the one hand, restricting access to whole regions of the human genome will stifle scientific progress. On the other, companies like Myriad Genetics and Optimal Medicine use the patents to protect years of work invested in research, but this also means preventing other companies from offering diagnostics based on competing faster and lower cost technologies to analyze mutations in these genes.
33210911
submission
dstates writes:
You paid for it, you should be able to read the results of publicly funded research. The National Institutes of Health have had a very successful open access mandate requiring that the results of federally funded biomedical research be published in open access journals. Now there is a White House petition to broaden this mandate. This is a jobs issue. Startups and midsize business need access to federally funded technology research. It is a health care issue, patients and community health providers need access, not a few scientists in well funded research institutes, and even wealthy institutions like Harvard are finding the prices of proprietary journals unsustainable.
24664594
submission
dstates writes:
What happens when Apple ships 100,000 iPhone 4S in a day? Answer, 100,000 users all try to activate their new phones. AT&T's activation servers are struggling under the load. Apparently Verizon and Sprint are doing a better job keeping up with the load.. See CNET and MediaPost.