Privacy

Congress Introduces Bill To Improve 'Internet of Things' Security (cnet.com) 54

Members of the US Senate and House of Representatives introduced the Internet of Things Cybersecurity Improvement Act on Monday, hoping to bring legislative action to the emerging technology. From a report: Connected devices are expected to boom to 20.4 billion units by 2020, but they don't all have the same levels of security. Hackers often target IoT devices that don't have built-in security, leading to problems like default passwords and vulnerabilities that can't be fixed. [...] Lawmakers are looking to fix that with the bill, which would require a bare minimum of security standards for any IoT devices that the federal government uses. "While I'm excited about their life-changing potential, I'm also concerned that many IoT devices are being sold without appropriate safeguards and protections in place, with the device market prioritizing convenience and price over security," Sen. Mark Warner, a Democrat from Virginia, said in a statement.
Bitcoin

QuadrigaCX Allegedly Traded Against Its Own Customers Without Assets To Back Them (ambcrypto.com) 93

A user writes: QuadrigaCX, the Canadian crypto exchange that made news recently with the passing of its CEO, Gerald Cotten, has been alleged to have been buying cryptocurrency from traders on its platform without having actual assets to perform the transactions. The transactions showed credit to the customers accounts, but when the customer tried to withdraw cash, they had to wait until other customers deposited cash before the funds became available. There is also an accusation that this behavior exists at many other crypto exchanges as well. Perhaps it is time to take a fresh look at Tether...
Government

Trump Endorses Permanent Daylight Savings Time (thehill.com) 376

President Trump on Monday threw his support behind efforts to keep the United States permanently on daylight saving time, which took effect Sunday morning. "Making Daylight Saving Time permanent is O.K. with me!" Trump tweeted. The Hill reports: California and several other states are considering measures that would end the biannual clock changes between standard and daylight saving time. Three GOP lawmakers from Florida introduced legislation in Congress this month that would end the November clock change from daylight saving time back to standard time. The measures, introduced by Sens. Marco Rubio and Rick Scott and Rep. Vern Buchanan, would keep the country in daylight saving time, the clock change made in early March that is observed by most states for eight months of the year. Rubio introduced a similar measure in 2018. That bill did not advance in the Senate.
The Almighty Buck

Debit Card With Built-In Fingerprint Reader Begins Trial In the UK (theverge.com) 58

British bank Natwest is trialing the use of a new NFC payment card with a built-in fingerprint scanner. "The trial, which will include 200 customers when it begins in mid-April, will allow its participants to make NFC payments (called 'contactless' in the UK) without needing to input a PIN or offer a signature," reports The Verge. "The standard [30 British pound] limit for contactless payments will not apply when the fingerprint is used." From the report: Currently, anyone can make a contactless payment in the UK by tapping their card on the terminal to make a payment. As a result of this lack of security, a [30 British pound] limit is applied to such payments, with retailers requiring you to place your card into the card reader and enter a PIN for more expensive purchases (commonly referred to as the "Chip and PIN" method). Although mobile payments require authentication, customers often find they're subject to the same [30 British pound] limit. The fingerprint data is stored locally on the card, meaning there's no security information for a hacker to be able to steal from a bank's central database. It's not foolproof -- there's always the risk a sufficiently determined thief could steal and imitate your fingerprint -- but it's much more secure than a PIN that someone could learn by simply looking over your shoulder as you enter it.
United States

FAA Says Boeing 737 MAX Planes Are Still Airworthy (cnbc.com) 209

An anonymous reader quotes a report from CNBC: The Boeing 737 MAX, the type of plane involved in a deadly crash in Ethiopia over the weekend, is still airworthy and the Federal Aviation Administration plans to issue a notice to the international aviation community later Monday, a person familiar with the matter said. "The FAA continuously assesses and oversees the safety performance of U.S. commercial aircraft," the FAA said in a statement. "If we identify an issue that affects safety, the FAA will take immediate and appropriate action."

Aviation officials in China and Indonesia ordered domestic airlines to ground their fleets of the popular Boeing single-aisle planes after the deadly crash of one operated by Ethiopian Airlines on Sunday. The 149 passengers and eight crew members on board were killed when the plane crashed shortly after takeoff. The incident was the second deadly crash of the new Boeing planes in less than five months. A Lion Air Boeing 737 MAX 8 plunged into the Java Sea shortly after taking off from Jakarta in October, killing all 189 people on board.

Television

Apple Confirms March 25th Event, Expected To Announce New TV Service (theverge.com) 38

Apple is holding an event on March 25th where it's expected to announce its long-rumored TV streaming and Apple News subscription services. The invitation shows an animated countdown GIF with the caption "It's show time," hinting that the new TV service will play a big role. The Verge reports: Rumors of an event at the end of March began last month, saying that the company will reportedly focus exclusively on services. Although, there is always a chance that we could see the anticipated announcements of revamped AirPods, a new entry-level iPad, and the long-delayed AirPower wireless charging pad. This is not the first time that Apple has used this tagline for an event: the company first used it for a September 2006 event where it announced that it would start offering movies on iTunes, along with the first reveal of the iTV (which would be renamed Apple TV on release in 2007). It's certainly a fitting teaser for the upcoming event. Just like in 2006, we could see Apple's media offerings for its devices expand yet again.

Along with the TV service, which is rumored to launch later this spring, Apple is also expected to take the wraps off its Apple News subscription service. The Apple News service will reportedly look to offer a Netflix-style bundle for magazines and subscription newspapers all in one convenient place. An early report from The Wall Street Journal indicated that Apple was having trouble with negotiations, reportedly demanding a staggering 50 percent of revenue from the service.

Robotics

US Seeks To Allay Fears Over Killer Robots (bbc.com) 67

Humans will always make the final decision on whether armed robots can shoot, the US Department of Defense said today. From a report: The statement comes as plans emerge for gun platforms that can choose their own targets on the battlefield. The plans seek to upgrade existing aiming systems, using developments in machine intelligence. The US said rules governing armed robots still stood and humans would retain the power to veto their actions. The defense department's plans seek to upgrade the current Advanced Targeting and Lethality Automated System (Atlas) used on ground combat vehicles to help human gunners aim. The military is seeking commercial partners to help develop aiming systems to "acquire, identify, and engage targets at least three times faster than the current manual process."
Government

John Oliver Fights Robocalls By Robocalling Ajit Pai and the FCC (arstechnica.com) 265

An anonymous reader quotes a report from Ars Technica: Comedian John Oliver is taking aim at the Federal Communications Commission again, this time demanding action on robocalls while unleashing his own wave of robocalls against FCC commissioners. In a 17-minute segment yesterday on HBO's Last Week Tonight, Oliver described the scourge of robocalls and blamed Pai for not doing more to stop them. Oliver ended the segment by announcing that he and his staff are sending robocalls every 90 minutes to all five FCC commissioners. "Hi FCC, this is John from customer service," Oliver's recorded voice says on the call. "Congratulations, you've just won a chance to lower robocalls in America today... robocalls are incredibly annoying, and the person who can stop them is you! Talk to you again in 90 minutes -- here's some bagpipe music."

When it came to robocalling the FCC, Oliver didn't need viewers' help. "This time, unlike our past encounters [with the FCC], I don't need to ask hordes of real people to bombard [the FCC] with messages, because with the miracle of robocalling, I can now do it all by myself," Oliver said. "It turns out robocalling is so easy, it only took our tech guy literally 15 minutes to work out how to do it," Oliver also said. He noted that "phone calls are now so cheap and the technology so widely available that just about everyone has the ability to place a massive number of calls." Under U.S. law, political robocalls to landline telephones are allowed without prior consent from the recipient. Such calls to cell phones require the called party's prior express consent, but Oliver presumably directed his robocalls to the commissioners' office phones.
Oliver told the FCC commissioners: "if you want to tell us that you don't consent to be robocalled, that's absolutely no problem. Just write a certified letter to the address we buried somewhere within the first chapter of Moby Dick that's currently scrolling up the screen... find the address, write us a letter, and we'll stop the calls immediately."
Businesses

How Badly Are We Being Ripped Off On Eyewear? Former Industry Execs Tell All (latimes.com) 440

LA Times reports: Charles Dahan knows from firsthand experience how badly people get ripped off when buying eyeglasses. He was once one of the leading suppliers of frames to LensCrafters, before the company was purchased by optical behemoth Luxottica. He also built machines that improved the lens-manufacturing process. In other words, Dahan, 70, knows the eyewear business from start to finish. And he doesn't like what's happened. "There is no competition in the industry, not anymore," he told me. "Luxottica bought everyone. They set whatever prices they please."

Both Butler and Dahan (former executives with LensCrafters) acknowledged what most consumers have long suspected: that the prices we pay for eyewear in no way reflect the actual cost of making frames and lenses. When he was in the business, in the 1980s and '90s, Dahan said it cost him between $10 and $16 to manufacture a pair of quality plastic or metal frames. Lenses, he said, might cost about $5 a pair to produce. With fancy coatings, that could boost the price all the way to $15.

He said LensCrafters would turn around and charge $99 for completed glasses that cost $20 or $30 to make -- and this was well below what many independent opticians charged. Nowadays, he said, those same glasses at LensCrafters might cost hundreds of dollars. Butler said he recently visited factories in China where many glasses for the U.S. market are manufactured. Improved technology has made prices even lower than what Dahan recalled. "You can get amazingly good frames, with a Warby Parker level of quality, for $4 to $8," Butler said. "For $15, you can get designer-quality frames, like what you'd get from Prada."

Microsoft

Microsoft Launches AI Business School (venturebeat.com) 28

Microsoft today introduced the AI Business School, a series of case studies and free instructional videos made to help business executives design and successfully implement an AI strategy within their organization. From a report: The Microsoft AI Business School is born out of three years of conversations with customers and follows the launch of an AI school for developers and AI School first introduced last year. The AI Business School follows the lead of similar instructional guides, such as the AI Transformation Playbook from Andrew Ng. Unlike others, AI Business School material draws on three years of conversations with customers implementing AI, as well as lessons learned from AI solutions Microsoft introduced internally, Microsoft vice president of AI marketing and productization Mitra Azizirad told VentureBeat in a phone interview. Course content will focus on four main areas: strategy, culture, technology basics, and responsible AI. And courses will include tools for things like evaluating a business' AI maturity level to understand what's required to successfully implement AI.
Government

US Government Will Be Scanning Your Face At 20 Top Airports, Documents Show (buzzfeednews.com) 111

An anonymous reader shares a report: In March 2017, President Trump issued an executive order expediting the deployment of biometric verification of the identities of all travelers crossing its borders. That mandate stipulates facial recognition identification for "100 percent of all international passengers," including American citizens, in the top 20 US airports by 2021. Now, the United States Department of Homeland Security is rushing to get those systems up and running at airports across the country. But it's doing so in the absence of proper vetting, regulatory safeguards, and what some privacy advocates argue is in defiance of the law.

According to 346 pages of as-yet-unpublished documents obtained by the nonprofit research organization Electronic Privacy Information Center, US Customs and Border Protection is scrambling to implement this "biometric entry-exit system," with the goal of using facial recognition technology on travelers aboard 16,300 flights per week -- or more than 100 million passengers traveling on international flights out of the United States -- in as little as two years, to meet Trump's accelerated timeline for a biometric system that had initially been signed into law by the Obama administration. This, despite questionable biometric confirmation rates and few, if any, legal guardrails.

These same documents state -- explicitly -- that there were no limits on how partnering airlines can use this facial recognition data. CBP did not answer specific questions about whether there are any guidelines for how other technology companies involved in processing the data can potentially also use it. It was only during a data privacy meeting last December that CBP made a sharp turn and limited participating companies from using this data. But it is unclear to what extent it has enforced this new rule. CBP did not explain what its current policies around data sharing of biometric information with participating companies and third-party firms are, but it did say that the agency "retains photos ... for up to 14 days" of non-US citizens departing the country, for "evaluation of the technology" and "assurance of the accuracy of the algorithms" -- which implies such photos might be used for further training of its facial matching AI.

United States

Salon: Republicans Are Launching Fake Local News Sites To Spread 'Propaganda' (salon.com) 539

"The Tennessee Star claims to be the 'most reliable' online local paper in the state," reports Salon. "In fact it's just a GOP front." An anonymous reader quotes their report:
An investigation by the fact-checking outlet Snopes found that several new local news websites are actually being launched by Republican consultants whose company is funded in part by the candidates the sites cover. Politico first reported last year that Tea Party-linked conservative activists Michael Patrick Leahy, Steve Gill and Christina Botteri were behind the "Tennessee Star," a website that purported to be a local news website but mostly posted content licensed from groups linked to big Republican donors. Snopes discovered that the trio has since launched similar sites in other battleground states ahead of the 2020 elections: the Ohio Star and the Minnesota Sun...

The group behind the sites does not appear content with just three outlets. According to Politico, Leahy has purchased domain names associated with Missouri, New England, the Dakotas, Michigan, North Carolina, Pennsylvania, Virginia and Wisconsin, most of which are electoral battleground states that will be vital in 2020.

Kathleen Bartzen Culver, who heads the Center of Journalism Ethics at the University of Wisconsin at Madison, told Snopes that political operatives are free to launch their own news platforms, but it's a problem if they are trying to deceive readers into believing the sites are nonpartisan local news. "I have no problem with advocacy organizations creating content that reinforces the positions they take on public policy issues on the left, right or center. The issue comes in when they're not transparent about that advocacy," Culver said... "The information sphere is so polluted right now that the average citizen has trouble telling what is real and what is not," Culver told Snopes. "I find that very troubling within a democracy."

United States

To Disrupt America's 2020 Elections, Russian Internet Trolls Amplify Divisive Messages, Assemble 'Massive' Followings (time.com) 331

An anonymous reader quotes Bloomberg: Russian internet trolls appear to be shifting strategy in their efforts to disrupt the 2020 U.S. elections, promoting politically divisive messages through phony social media accounts instead of creating propaganda themselves, cybersecurity experts say. The Kremlin-linked Internet Research Agency may be among those trying to circumvent protections put in place by companies including Facebook Inc. and Twitter Inc. to find and remove fake content that hackers created to sow division among the American electorate in the 2016 presidential campaign. "Instead of creating content themselves, we see them amplifying content," said John Hultquist, the director of intelligence analysis at FireEye Inc. "Then it's not necessarily inauthentic, and that creates an opportunity for them to hide behind somebody else."

Other hackers are breaking into computing devices and using them to open large numbers of social media accounts, according to Candid Wueest, a senior threat researcher at Symantec Corp. The hacked devices are used to create many legitimate-looking users as well as believable followers and likes for those fake users... Wueest said he observed a decrease in the creation of new content by fake accounts from 2017 to 2018 and a shift toward building massive followings that could be used as platforms for divisive messages in 2020.

Facebook's head of cybersecurity policy responded that policing foreign influence campaigns is "an incredibly hard balance" between the need to slow down bad actors while maintaining "meaningful public discussion."
The Almighty Buck

USA Today Tech Columnist: Millennials Will Live To See a Cashless World (usatoday.com) 454

"I haven't had a nickel, dime, quarter or penny in my pocket for two years," writes USA Today tech columnist Jefferson Graham, adding "Why bother? We're now living in what's quickly becoming a cashless society, where credit cards or electronic payments on your phone rule."

His column is addressed to the mayor of Philadelphia, who this week signed a bill that bans cashless stores. Mr. Mayor. It's happening all over the world, and not just from Amazon. We are going cashless. Maybe not in your lifetime, but certainly for millennials. Banks and credit card companies want this to curb the costs of handling green. Selected merchants are into it now... USA Today's Charisse Jones discovered that cash purchases were down to 30 percent of all retail transactions as of last year compared to 40 percent in 2012. Millennials, she noted here this week, are saying no to cash, with 21 percent of those 23- to 34 years old saying that most of their transactions were in cash in 2016....

Mobile pay is still a sliver of overall retail sales, but it's definitely on the rise. Target, a long holdout, just added Apple Pay to one of its options, following in the footsteps of Best Buy, CVS, Costco and other retail giants who now accept payment via iPhone. The big, lone holdout right now is Walmart, the No. 1 retailer. It does have its own mobile pay app, that links bank payments to QR codes. And Mr. Mayor, good news for you. Walmart still accepts cash, too.

But for how long?

Slashdot Top Deals