Microsoft Finally Bans SHA-1 Certificates In Its Browsers

An anonymous reader quotes ZDNet: With this week’s monthly Patch Tuesday, Microsoft has also rolled out a new policy for Edge and Internet Explorer that prevents sites that use a SHA-1-signed HTTPS certificate from loading. The move brings Microsoft’s browsers in line with Chrome, which dropped support for the SHA-1 cryptographic hash function in January’s stable release of Chrome 56, and Firefox’s February cut-off… Apple dropped support for SHA-1 in March with macOS Sierra 10.12.4 and iOS 10.3… Once Tuesday’s updates are installed, Microsoft’s browsers will no longer load sites with SHA-1 signed certificates and will display an error warning highlighting a security problem with the site’s certificate. Read more of this story at Slashdot.

View post:
Microsoft Finally Bans SHA-1 Certificates In Its Browsers

Today’s Massive Ransomware Attack Was Mostly Preventable—Here’s How To Avoid It

Ransomware may be mostly thought of as a (sometimes costly) nuisance, but when it hinders the ability of doctors and nurses to help people with an emergency medical problems, that qualifies as armed robbery. Read more…

Taken from:
Today’s Massive Ransomware Attack Was Mostly Preventable—Here’s How To Avoid It

Biggest Global Cyber Attack Ever? 10 WannaCry Ransomware Facts

A global cybersecurity attack involving WannaCry ransomware crippled Microsoft Windows computers across the globe today. Here are 10 facts to know. The post Biggest Global Cyber Attack Ever? 10 WannaCry Ransomware Facts appeared first on ChannelE2E .

More:
Biggest Global Cyber Attack Ever? 10 WannaCry Ransomware Facts

WCry is so mean Microsoft issues patch for 3 unsupported Windows versions

Enlarge (credit: Health Service Journal) A day after a ransomware worm infected 75,000 machines in 100 countries, Microsoft is taking the highly unusual step of issuing patches that immunize Windows XP, 8, and Server 2003, operating systems the company stopped supporting as many as three years ago. The company also rolled out a signature that allows its Windows Defender antivirus engine to provide “defese-in-depth” protection. The moves came after attackers on Friday used a recently leaked attack tool developed by the National Security Agency to virally spread ransomware known as WCry . Within hours, computer systems around the world were crippled, prompting hospitals to turn away patients and telecoms, banks and companies such as FedEx to turn off computers for the weekend. The chaos surprised many security watchers because Microsoft issued an update in March that patched the underlying vulnerability in Windows 7 and most other supported versions of Windows. (Windows 10 was never vulnerable.) Friday’s events made it clear that enough unpatched systems exist to cause significant outbreaks that could happen again in the coming days or months. In a blog post published late Friday night , Microsoft officials wrote: Read 9 remaining paragraphs | Comments

See the original post:
WCry is so mean Microsoft issues patch for 3 unsupported Windows versions

Google Found Over 1,000 Bugs In 47 Open Source Projects

Orome1 writes: In the last five months, Google’s OSS-Fuzz program has unearthed over 1, 000 bugs in 47 open source software projects… So far, OSS-Fuzz has found a total of 264 potential security vulnerabilities: 7 in Wireshark, 33 in LibreOffice, 8 in SQLite 3, 17 in FFmpeg — and the list goes on… Google launched the program in December and wants more open source projects to participate, so they’re offering cash rewards for including “fuzz” targets for testing in their software. “Eligible projects will receive $1, 000 for initial integration, and up to $20, 000 for ideal integration” — or twice that amount, if the proceeds are donated to a charity. Read more of this story at Slashdot.

More:
Google Found Over 1,000 Bugs In 47 Open Source Projects

Microsoft Finally Bans SHA-1 Certificates In Its Browsers

An anonymous reader quotes ZDNet: With this week’s monthly Patch Tuesday, Microsoft has also rolled out a new policy for Edge and Internet Explorer that prevents sites that use a SHA-1-signed HTTPS certificate from loading. The move brings Microsoft’s browsers in line with Chrome, which dropped support for the SHA-1 cryptographic hash function in January’s stable release of Chrome 56, and Firefox’s February cut-off… Apple dropped support for SHA-1 in March with macOS Sierra 10.12.4 and iOS 10.3… Once Tuesday’s updates are installed, Microsoft’s browsers will no longer load sites with SHA-1 signed certificates and will display an error warning highlighting a security problem with the site’s certificate. Read more of this story at Slashdot.

More:
Microsoft Finally Bans SHA-1 Certificates In Its Browsers

Windows 10 Timeline remembers everything you did on your PC

One of the more intriguing features Microsoft will include in this fall’s Windows 10 Creators Update is Timeline. As the name suggests, it’s a way for you to move backwards in time and see things you were working on in the past and resume what you were doing. Microsoft described it as a visual timeline of everything you were doing on your computer, and you can jump back into files, applications and websites where you left off. Introducing Timeline. Easily jump back in time to continue where you left off. #Windows10 #MSBuild pic.twitter.com/e3gxhXnp6W — Windows (@Windows) May 11, 2017 Timeline lives in the Windows app switcher. When you click it, you’ll see your active apps, but below that you’ll see what you were running earlier in the day. Clicking down on one of those things that you were using earlier will pop it open just as you were using it before. This works across multiple devices, as well — when you open up another Windows device where you’re signed in, you can resume the tasks you were using before. This will even work across other devices like an iPhone using the Cortana app. If you’re somewhere where you have Cortana, it’ll prompt you to continue working on whatever you were doing before. If you don’t have the specific app installed on your phone, it’ll help point you to the right app as well. At first glance, it sounds a little bit like the Time Machine backup feature that Apple has included in macOS for years now. But Time Machine is more of a file backup system that lets you go back and see earlier versions of files that you might want to restore. Microsoft’s Timeline covers applications and websites as well as just files, and it doesn’t require an external hard drive, as it’s not really a true backup system in the way Time Machine is. Indeed, Timeline appears more like Microsoft’s answer to Continuity, a feature Apple build into macOS and iOS that lets you pick up and resume work across whatever Apple device you’re using. Timeline is just one feature in the forthcoming Creators Update, which features a host of tools for using Microsoft’s software and services across devices. The “Microsoft Graph” set of APIs will let you pick up and continue work across multiple devices and will iOS and Android as well as Windows. It’ll also let you have a “universal clipboard” across your devices. Click here to catch up on the latest news from Microsoft Build 2017.

View the original here:
Windows 10 Timeline remembers everything you did on your PC

Reddit Users Lose Real Money After Meme Currency Bot Dies

Another day, another cryptocurrency clusterfuck. This week, the creator of the tipping bot “dogetipbot”—a service that let Reddit users “tip” each other in Dogecoin— announced that his company is broke, he’s broke, and the bot is broke because he spent all the coins, after he himself ran out of money. Read more…

More:
Reddit Users Lose Real Money After Meme Currency Bot Dies

NYU Accidentally Exposed Military Code-breaking Computer Project To Entire Internet

An anonymous reader writes: A confidential computer project designed to break military codes was accidentally made public by New York University engineers. An anonymous digital security researcher identified files related to the project while hunting for things on the internet that shouldn’t be, The Intercept reported. He used a program called Shodan, a search engine for internet-connected devices, to locate the project. It is the product of a joint initiative by NYU’s Institute for Mathematics and Advanced Supercomputing, headed by the world-renowned Chudnovsky brothers, David and Gregory, the Department of Defense, and IBM. Information on an exposed backup drive described the supercomputer, called — WindsorGreen — as a system capable of cracking passwords. Read more of this story at Slashdot.

Read the original:
NYU Accidentally Exposed Military Code-breaking Computer Project To Entire Internet

Harley-Davidson embraces the potential of electric motorcycles

Bikers interested in going green have reason to rejoice today. Harley-Davidson has already shown off its prototype Livewire electric bike, and it’s promised to offer you a real one in the next five years . Today, the motorcycle manufacturer said it has plans to make 100 new motorcycles over the next 10 years, including an entire range of electric vehicles. Vice president Bill Davidson confirmed that electric bikes are Harley-Davidson’s future to Drive magazine while in Sydney to celebrate the brand’s 100th anniversary in Australia. While an electric Harley won’t have the signature engine boom that its combustion-powered bikes have, Davidson said that the company is working on a sound that he likens to a jet engine. “It is an amazing motorcycle, ” he told Drive . “While it doesn’t have a 45-degree, pushrod twin-cylinder engine it has the performance expected from a Harley Davidson even if it won’t sound the same, ” he said. So far, we’ve only seen the one Livewire concept model with a limited top speed and range, it’s likely thHarleyely-Davidson will create both sport and cruiser-style bikes to appeal to both the speed freaks and the touring bikers. Davidson noted that as automated cars become more ubiquitous, driving enthusiasts may turn to motorcycles to get their manual fix, telling Drive , “I think the more automatic cars [happen], motorcycling will become more appealing. I see it as a huge opportunity.” Via: Autoblog Source: Drive

More:
Harley-Davidson embraces the potential of electric motorcycles