wiredmikey writes Researchers with RSA have discovered a Boleto malware (Bolware) ring that compromised as many as 495,753 Boleto transactions during a two-year period. Though it is not clear whether the thieves successfully collected on all of the compromised transactions, the value of those transactions is estimated to be worth as much as $3.75 billion. A Boleto is essentially a document that allows a customer to pay an exact amount to a merchant. Anyone who owns a bank account — whether a company or an individual — can issue a Boleto associated with their bank. The first signs of its existence appeared near the end of 2012 or early 2013, when it began to be reported in the local news media," according to the report (PDF). "The RSA Research Group analyzed version 17 of the malware, gathering data between March 2014 and June 2014. The main goal of Boleto malware is to infiltrate legitimate Boleto payments from individual consumers or companies and redirect those payments from victims to fraudster accounts."

dcblogs writes Microsoft has joined a Linux Foundation effort to create an open platform for the Internet of Things. The AllSeen Alliance is an effort to standardize device communications. The code that it champions, called AllJoyn, was initially developed by Qualcomm but was subsequently made open source. Big vendors have been recruited to support it, and the AllSeen Alliance now includes LG, Panasonic, Sharp and Haier, among others. Its Xbox gaming platform is seen as a potential hub or control center for home devices. Microsoft's leadership in computing "and its significant Xbox business make it a potentially important contributor to the AllSeen ecosystem," said said Andy Castonguay, an analyst at Machina Research, a Reading, England-based research firm focusing on machine-to-machine (M2M) communications and the Internet of Things.

An anonymous reader writes There's an independent agency within the U.S. government called the Privacy and Civil Liberties Oversight Board. Their job is to weigh the benefits of government actions — like stopping terrorist threats — against violations of citizens' rights that may result from those actions. As you might expect, the NSA scandal landed squarely in their laps, and they've compiled a report evaluating the surveillance methods. As the cynical among you might also expect, the Oversight Board gave the NSA a pass, saying that while their methods were "close to the line of constitutional reasonableness," they were used for good reason. In the completely non-binding 191-page report (PDF), they said, "With regard to the NSA's acquisition of 'about' communications [metadata], the Board concludes that the practice is largely an inevitable byproduct of the government's efforts to comprehensively acquire communications that are sent to or from its targets. Because of the manner in which the NSA conducts upstream collection, and the limits of its current technology, the NSA cannot completely eliminate 'about' communications from its collection without also eliminating a significant portion of the 'to/from' communications that it seeks."

Albanach writes: In 2007, the BBC's economics editor, Robert Peston, penned an article on the massive losses at Merrill Lynch and the resulting resignation of their CEO Stan O'Neal. Today, the BBC has been notified that the 2007 article will no longer appear in some Google searches made within the European Union, apparently as a result of someone exercising their new-found "right to be forgotten." O'Neal was the only individual named in the 2007 article. While O'Neal has left Merrill Lynch, he has not left the world of business, and now holds a directorship at Alcoa, the world's third largest aluminum producer with $23 billion in revenues in 2013.

After some speculation yesterday about the winner of the auction for the first block of bitcoins seized from the Silk Road, the winner went ahead and made his identity public. Tim Draper has won the U.S. Marshals bitcoin auction and is partnering with Vaurum to provide bitcoin liquidity in emerging markets. ... Tim offered this in a statement: “Bitcoin frees people from trying to operate in a modern market economy with weak currencies. With the help of Vaurum and this newly purchased bitcoin, we expect to be able to create new services that can provide liquidity and confidence to markets that have been hamstrung by weak currencies. Of course, no one is totally secure in holding their own country’s currency. We want to enable people to hold and trade bitcoin to secure themselves against weakening currencies.”

rtoz (2530056) writes Whenever there is a major spill of oil into water, the two tend to mix into a suspension of tiny droplets, called an "emulsion." It is extremely hard to separate them, and they can cause severe damage to ecosystems. Now, MIT researchers have discovered a new, inexpensive way of getting the two fluids apart again. This new approach uses membranes with hierarchical pore structures. The membranes combine a very thin layer of nanopores with a thicker layer of micropores to limit the passage of unwanted material while providing strength sufficient to withstand high pressure and throughput.

oever (233119) writes with news that WebODF (an Open Document Format editor written entirely using Javascript and natively rendering the XML document using CSS) 0.5.0 has been released, and the developers are declaring this release stable enough for every day use. TheMukt chides Google for not supporting the OpenDocument Format well and claims that the newly released WebODF 0.5.0 in combination with ownCloud is the answer to this deficiency. A WebODF developer blog highlights all the goodies in the first WebODF release where the text editor is considered stable and made available as an easy to use component. These include extensive benchmarking, unit testing, and advanced HTML5 techniques to give the editor a native feel. There's also touch screen support, and better support for real-time collaborative editing. A demo shows off a few of the features.

mrspoonsi (2955715) writes with this excerpt from the BBC: ISPs from the U.S., UK, Netherlands, and South Korea have joined forces with campaigners Privacy International to take GCHQ to task over alleged attacks on network infrastructure. It is the first time that GCHQ has faced such action. The ISPs claim that alleged network attacks, outlined in a series of articles in Der Spiegel and the Intercept, were illegal and "undermine the goodwill the organizations rely on." The complaint (PDF).