Student Charged By FBI For Hacking His Grades More Than 90 times

An anonymous reader shares a report: In college, you can use your time to study. Or then again, you could perhaps rely on the Hand of God. And when I say “Hand of God, ” what I really mean is “keylogger.” Think of it like the “Nimble Fingers of God.” “Hand of God” (that makes sense) and “pineapple” (???) are two of the nicknames allegedly used to refer to keyloggers used by a former University of Iowa wrestler and student who was arrested last week on federal computer-hacking charges in a high-tech cheating scheme. According to the New York Times, Trevor Graves, 22, is accused in an FBI affidavit of working with an unnamed accomplice to secretly plug keyloggers into university computers in classrooms and in labs. The FBI says keyloggers allowed Graves to record whatever his professors typed, including credentials to log into university grading and email systems. Court documents allege that Graves intercepted exams and test questions in advance and repeatedly changed grades on tests, quizzes and homework assignments. This went on for 21 months — between March 2015 and December 2016. The scheme was discovered when a professor noticed that a number of Graves’ grades had been changed without her authorization. She reported it to campus IT security officials. Read more of this story at Slashdot.

Continued here:
Student Charged By FBI For Hacking His Grades More Than 90 times

MacOS High Sierra is well worth the upgrade

MacOS High Sierra was never meant to be truly transformative. As we covered in our preview of Apple’s new desktop OS , it’s mostly focused on refining its predecessor, last year’s Sierra . At the same time, it also lays the groundwork for bigger changes down the line. Since there’s not much you’ll actually notice, and barely anything has changed since we published our extensive preview, we won’t be doing a full review of the new OS. But with High Sierra officially launching today , it’s worth highlighting the handful of notable features. A better Safari Apple claims that Safari 11 in High Sierra is the world’s fastest web browser. My testing with the JetStream benchmark confirmed that it was faster than both Chrome and Firefox on my MacBook Air. Safari clocked in with a score of 176.8, while the other two browsers came in around 129 (and yes, higher is better). Even so, I still found myself relying on the other browsers most of the time. Some of Google’s services, like Hangouts, only work on Chrome. And Firefox is typically the browser I use for dealing with anything related to work (it’s helpful having two browsers open at once for managing multiple Google accounts). While Safari tended to load some sites faster, that wasn’t enough to make me switch over. As for other tweaks, Safari 11 mutes auto-playing web videos by default, which should help bring some peace as more sites push unwanted video on their readers. You can also enable the cleaner “Reader” mode automatically for specific sites, or have it automatically turn on for every website that supports the feature. That’s something you can only do with Chrome through settings hacks, or by installing third-party extensions. Apple also claims Safari will let you browse the web for two hours longer than the other two browsers, as well as watch Netflix for four hours longer. Photos upgrades As we covered in our preview piece, the Photos app got a slew of tweaks. But after testing the OS for the past few months, I ended up appreciating the new Live Photos capabilities the most. Just like in iOS 11, you can now turn Live Photos into short animated clips that resemble GIFs. You can choose from Loop, which just repeats the clip; Bounce, which moves it back and forth in time; and Long Exposure, a unique effect that mimics the dreamy photos you can get by manipulating exposure settings on bigger cameras. They’re not groundbreaking effects, but they finally make Live Photos seem useful, rather than a waste of space. All of other Photos upgrades from iOS 11 also show up in High Sierra. That includes smarter people recognition (which can sync across all of your iCloud-connected devices), more automatic Memories options, and a wider assortment of photo filters. Another helpful upgrade: Third-party companies can now create extensions for Photos, which allows you to do things like prepare photo books without leaving the app. VR support Thanks to Metal 2, Apple’s updated graphics API, MacOS can finally handle virtual reality. Right now, it’s limited to the HTC Vive using SteamVR — sorry, Oculus Rift fans. And, just like with typical games, not every title supports Macs yet. Sure, it’s very much early days for VR on Macs, but at least it’s possible now with High Sierra. We didn’t have any beefy Macs to test out the OS’s VR capabilities, unfortunately. As we’ve noted before, figuring out which Macs can actually support VR is surprisingly confusing. But at least High Sierra also brings support for external GPU docks, which means you can conceivably upgrade any Thunderbolt-equipped Mac with faster graphics capabilities. Metal 2 should also make High Sierra more efficient at rendering windows and typical UI elements, especially if you have a decent dedicated GPU. I didn’t notice much of a difference on my 2014 MacBook Air as I tested the new OS over the past few months. Wrapping up A few other points worth noting: Apple made a big deal about its upgraded Apple File System when it first announced High Sierra, but I didn’t notice much of a difference as I was testing the OS. Surprisingly, the company also dropped support for APFS on hybrid Fusion drives — at this point it only works on SSDs. Siri brings over its improved voice and DJ abilities that we first saw in iOS 11. You can now check on your airline flight status right from the Spotlight search bar. We always knew High Sierra was going to be an iterative update for Apple, but I’m surprised by how few visible changes there are. It’s tough to tell you’ve even upgraded from Sierra unless you peek at your system’s settings. Together with a similarly humdrum iOS 11 update (unless you’re on an iPad), it seems like Apple was more focused on its new hardware this year than its software.

Read more here:
MacOS High Sierra is well worth the upgrade

Apple Refuses To Enable iPhone Emergency Settings that Could Save Countless Lives

An anonymous reader shares a report: Despite being relatively easy, Apple keeps ignoring requests to enable a feature called Advanced Mobile Location (AML) in iOS. Enabling AML would give emergency services extremely accurate locations of emergency calls made from iPhones, dramatically decreasing response time. As we have covered before, Google’s successful implementation of AML for Android is already saving lives. But where Android users have become safer, iPhone owners have been left behind. The European Emergency Number Association (EENA), the organization behind implementing AML for emergency services, released a statement today that pleads Apple to consider the safety of its customers and participate in the program: “As AML is being deployed in more and more countries, iPhone users are put at a disadvantage compared to Android users in the scenario that matters most: An emergency. EENA calls on Apple to integrate Advanced Mobile Location in their smartphones for the safety of their customers.” Why is AML so important? Majority of emergency calls today are made from cellphones, which has made location pinging increasingly more important for emergency services. There are many emergency apps and features in development, but AML’s strength is that it doesn’t require anything from the user — no downloads and no forethought: The process is completely automated. With AML, smartphones running supporting operating systems will recognize when emergency calls are being made and turn on GNSS (global navigation satellite system) and Wi-Fi. The phone then automatically sends an SMS to emergency services, detailing the location of the caller. AML is up to 4, 000 times more accurate than the current systems — pinpointing phones down from an entire city to a room in an apartment. “In the past months, EENA has been travelling around Europe to raise awareness of AML in as many countries as possible. All these meetings brought up a recurring question that EENA had to reply to: ‘So, what about Apple?'” reads EENA’s statement. Read more of this story at Slashdot.

Taken from:
Apple Refuses To Enable iPhone Emergency Settings that Could Save Countless Lives

Trump Wants To Modernize Air Travel By Turning Over Control To the Big Airlines

An anonymous reader quotes a report from The Verge: Today, President Donald Trump endorsed a plan to hand over oversight of the nation’s airspace to a non-profit corporation that will likely be largely controlled by the major airlines. Republicans argue that privatizing air traffic control will help save money and fast track important technological upgrades. But Democrats and consumer groups criticize that plan as a corporate giveaway that will inevitably harm passengers. The air traffic reform proposal, which fell short in Congress last year, would transfer oversight from the Federal Aviation Administration (FAA) to a government-sanctioned, independent entity that would be made up of appointees from industry stakeholders. The effort picked up steam when the union representing air traffic controllers endorsed the plan, citing years of understaffing by the FAA. Some passengers may balk at the idea of handing over day-to-day management of the nation’s highly complex air traffic control system to the same companies that rack up tens of thousands of customer complaints a year, and occasionally physically assault or drag passengers off their planes. But the Trump administration argues this is the only way to modernize a system that still runs on technology that’s been around since World War II. The FAA is already years into a technology upgrade known as NextGen, which involves moving from the current system based on radar and voice communications to one based on satellite navigation and digital communications. The FAA wants to use GPS technology to shorten routes, save time and fuel, and reduce traffic delays by increasing capacity. Read more of this story at Slashdot.

Read More:
Trump Wants To Modernize Air Travel By Turning Over Control To the Big Airlines

IT Crash Causes British Airways To Cancel All Flights

An anonymous reader quotes CNBC: British Airways canceled all flights from London’s Heathrow and Gatwick airports on Saturday as a global IT failure upended the travel plans of tens of thousands of people on a busy U.K. holiday weekend. The airline said it was suffering a “major IT systems failure” around the world. Chief executive Alex Cruz said “we believe the root cause was a power-supply issue and we have no evidence of any cyberattack.” He said the crash had affected “all of our check-in and operational systems.” BA operates hundreds of flights from the two London airports on a typical day — and both are major hubs for worldwide travel. Several hours after problems began cropping up Saturday morning, BA suspended flights up to 6 p.m. because the two airports had become severely congested. The airline later scrapped flights from Heathrow and Gatwick for the rest of the day. Read more of this story at Slashdot.

Read More:
IT Crash Causes British Airways To Cancel All Flights

NIST’s Draft To Remove Periodic Password Change Requirements Gets Vendors’ Approval

An anonymous reader writes: A recently released draft of the National Institute of Standards and Technology’s digital identity guidelines has met with approval by vendors. The draft guidelines revise password security recommendations and altering many of the standards and best practices security professionals use when forming policies for their companies. The new framework recommends, among other things: “Remove periodic password change requirements.” There have been multiple studies that have shown requiring frequent password changes to actually be counterproductive to good password security, said Mike Wilson, founder of PasswordPing. NIST said this guideline was suggested because passwords should be changed when a user wants to change it or if there is indication of breach. Read more of this story at Slashdot.

More:
NIST’s Draft To Remove Periodic Password Change Requirements Gets Vendors’ Approval

NIST’s Draft To Remove Periodic Password Change Requirements Gets Vendors’ Approval

An anonymous reader writes: A recently released draft of the National Institute of Standards and Technology’s digital identity guidelines has met with approval by vendors. The draft guidelines revise password security recommendations and altering many of the standards and best practices security professionals use when forming policies for their companies. The new framework recommends, among other things: “Remove periodic password change requirements.” There have been multiple studies that have shown requiring frequent password changes to actually be counterproductive to good password security, said Mike Wilson, founder of PasswordPing. NIST said this guideline was suggested because passwords should be changed when a user wants to change it or if there is indication of breach. Read more of this story at Slashdot.

Read More:
NIST’s Draft To Remove Periodic Password Change Requirements Gets Vendors’ Approval

NIST’s Draft To Remove Periodic Password Change Requirements Gets Vendors’ Approval

An anonymous reader writes: A recently released draft of the National Institute of Standards and Technology’s digital identity guidelines has met with approval by vendors. The draft guidelines revise password security recommendations and altering many of the standards and best practices security professionals use when forming policies for their companies. The new framework recommends, among other things: “Remove periodic password change requirements.” There have been multiple studies that have shown requiring frequent password changes to actually be counterproductive to good password security, said Mike Wilson, founder of PasswordPing. NIST said this guideline was suggested because passwords should be changed when a user wants to change it or if there is indication of breach. Read more of this story at Slashdot.

See the original post:
NIST’s Draft To Remove Periodic Password Change Requirements Gets Vendors’ Approval

NIST’s Draft To Remove Periodic Password Change Requirements Gets Vendors’ Approval

An anonymous reader writes: A recently released draft of the National Institute of Standards and Technology’s digital identity guidelines has met with approval by vendors. The draft guidelines revise password security recommendations and altering many of the standards and best practices security professionals use when forming policies for their companies. The new framework recommends, among other things: “Remove periodic password change requirements.” There have been multiple studies that have shown requiring frequent password changes to actually be counterproductive to good password security, said Mike Wilson, founder of PasswordPing. NIST said this guideline was suggested because passwords should be changed when a user wants to change it or if there is indication of breach. Read more of this story at Slashdot.

View the original here:
NIST’s Draft To Remove Periodic Password Change Requirements Gets Vendors’ Approval

NIST’s Draft To Remove Periodic Password Change Requirements Gets Vendors’ Approval

An anonymous reader writes: A recently released draft of the National Institute of Standards and Technology’s digital identity guidelines has met with approval by vendors. The draft guidelines revise password security recommendations and altering many of the standards and best practices security professionals use when forming policies for their companies. The new framework recommends, among other things: “Remove periodic password change requirements.” There have been multiple studies that have shown requiring frequent password changes to actually be counterproductive to good password security, said Mike Wilson, founder of PasswordPing. NIST said this guideline was suggested because passwords should be changed when a user wants to change it or if there is indication of breach. Read more of this story at Slashdot.

Read More:
NIST’s Draft To Remove Periodic Password Change Requirements Gets Vendors’ Approval