Hack Exposes 412 Million Accounts on AdultFriendFinder Sites

“Almost every account password was cracked, thanks to the company’s poor security practices, ” reports ZDNet — even for “deleted” accounts. An anonymous reader quotes their article: The hack includes 339 million accounts from AdultFriendFinder.com, which the company describes as the “world’s largest sex and swinger community [and] also includes over 15 million “deleted” accounts that weren’t purged from the databases. On top of that, 62 million accounts from Cams.com, and 7 million from Penthouse.com were stolen, as well as a few million from other smaller properties owned by the company. The data accounts for two decades’ worth of data from the company’s largest sites, according to breach notification LeakedSource, which obtained the data… The three largest site’s SQL databases included usernames, email addresses, and the date of the last visit, and passwords, which were either stored in plaintext or scrambled with the SHA-1 hash function, which by modern standards isn’t cryptographically as secure as newer algorithms. The attack apparently coincides with the discovery of “a local file inclusion flaw on the AdultFriendFinder site, which if successfully exploited could allow an attacker to remotely run malicious code on the web server. ” Ironically, Friend Finder Networks doesn’t even own Penthouse.com anymore. They sold the site to a new owner last February. Read more of this story at Slashdot.

View post:
Hack Exposes 412 Million Accounts on AdultFriendFinder Sites

Alibaba Posts $1 Billion in Sales in 5 Minutes on Singles’ Day

Alibaba Group posted $1 billion (6.81 billion yuan) of sales within the first five minutes of its Singles’ Day sales, a 24-hour event that may offer clues on the health of the Chinese economy and its largest online retailer. From a report on Bloomberg:Investors are keeping a close eye on the annual Nov. 11 spending blitz that dwarfs Black Friday and Cyber Monday in the U.S., to see if Alibaba can reprise the 60 percent leap in transactions to 91.2 billion yuan it managed last year. The e-commerce giant again turned up the star-wattage for 2016, enlisting Hollywood actress Scarlett Johansson, sports celebrity David Beckham, basketball legend Kobe Bryant and pop-rock band One Republic to headline a pre-sale gala and drum up international attention. Pioneered by Alibaba in 2009 and since replicated by rivals including JD.com Inc., Singles’ Day has become somewhat of a barometer of Chinese consumer sentiment. Read more of this story at Slashdot.

See the original article here:
Alibaba Posts $1 Billion in Sales in 5 Minutes on Singles’ Day

Computer Virus Attack Forces Hospitals To Cancel Operations, Shut Down Systems

A hospital system in the United Kingdom has canceled all planned operations and diverted major trauma cases to neighboring facilities citing a computer virus outbreak. From a report on ZDNet: The Northern Lincolnshire and Goole NHS Foundation Trust says a “major incident” has been caused by a “computer virus” which infected its electronic systems on Sunday. As a result of the attack, the hospital has taken the decision to shut down the majority of its computer networks in order to combat the virus. “A virus infected our electronic systems [on Sunday] and we have taken the decision, following expert advice, to shut down the majority of our systems so we can isolate and destroy it, ” said Dr Karen Dunderdale, the trust’s deputy chief executive. The use of a shared IT system also means the United Lincolnshire Hospitals Trust has been taken offline as staff attempt to combat the attack. As a result of the attack, all outpatient appointments and diagnostic procedures that were set to take place at the infected hospitals on Monday and Tuesday have been canceled, while medical emergencies involving major trauma and women in high-risk labor are being diverted to neighboring hospitals. Read more of this story at Slashdot.

Read the original post:
Computer Virus Attack Forces Hospitals To Cancel Operations, Shut Down Systems

WordPress Founder Accuses Wix Of Stealing Code

An anonymous reader writes: “Wow, dude I did not even know we were fighting, ” Wix CEO Avishai Abrahami posted on the company’s blog Saturday — responding to WordPress creator Matt Mullenweg, who on Friday accused Wix of stealing their code. “The claim is that the Wix mobile apps distribute GPL code and aren’t themselves GPL, so they violate the license, ” Mullenweg wrote. Abrahami argued that “Everything we improved there or modified, we submitted back as open source, ” adding “we will release the app you saw as well… ” Mullenweg responded “It appears you and [lead engineer] Tal might share a misunderstanding of how the GPL works, ” ultimately adding “software licensing can be tricky and many people make honest mistakes.” Wix had also argued they’re giving back to the open source community by listing 224 public projects on their GitHub page. “Thank you for the offer to use them, ” Mullenweg responded. “If we do, we’ll make sure to follow the license you’ve put on the code very carefully.” Read more of this story at Slashdot.

Read the original post:
WordPress Founder Accuses Wix Of Stealing Code

AT&T has $80 billion deal to purchase Time Warner Inc. (and with it, HBO)

Enlarge (credit: Getty Images | Tim Boyle) Following up on news reported yesterday, AT&T has reached a deal to buy Time Warner Inc. for more than $80 billion,  The Wall Street Journal wrote today . The boards of the companies are meeting today to approve the merger, “with a deal likely to be announced as soon as Saturday evening.” Original story from yesterday follows: AT&T and Time Warner Inc. have recently met “to discuss various business strategies including a possible merger,”  Bloomberg reported Thursday . Discussions are still in early stages, according to Bloomberg’s anonymous sources. “The talks, which at this stage are informal, have focused on building relations between the companies rather than establishing the terms of a specific transaction, the people said, asking not to be identified as the deliberations are private,” Bloomberg wrote. “Neither side has yet hired a financial adviser, the people said.” Read 7 remaining paragraphs | Comments

See the article here:
AT&T has $80 billion deal to purchase Time Warner Inc. (and with it, HBO)

“Most serious” Linux privilege-escalation bug ever is under active exploit (updated)

(credit: michael ) A serious vulnerability that has been present for nine years in virtually all versions of the Linux operating system is under active exploit, according to researchers who are advising users to install a patch as soon as possible. While CVE-2016-5195, as the bug is cataloged, amounts to a mere privilege-escalation vulnerability rather than a more serious code-execution vulnerability, there are several reasons many researchers are taking it extremely seriously. For one thing, it’s not hard to develop exploits that work reliably. For another, the flaw is located in a section of the Linux kernel that’s a part of virtually every distribution of the open-source OS released for almost a decade. What’s more, researchers have discovered attack code that indicates the vulnerability is being actively and maliciously exploited in the wild. “It’s probably the most serious Linux local privilege escalation ever,” Dan Rosenberg, a senior researcher at Azimuth Security, told Ars. “The nature of the vulnerability lends itself to extremely reliable exploitation. This vulnerability has been present for nine years, which is an extremely long period of time.” Read 6 remaining paragraphs | Comments

See more here:
“Most serious” Linux privilege-escalation bug ever is under active exploit (updated)

Target Passes Walmart As Top US Corporate Installer of Solar Power

An anonymous reader quotes a report from Electrek: Target is the top corporate installer of solar power in the USA with 147MW installed on 300 stores. Walmart is close behind with 140MW, while Ikea has installed solar on 90% of its retail locations. The Solar Energy Institute of America (SEIA) report shows over 1, 000MW of solar installed in almost 2, 000 unique installations by the largest corporate entities in the country. Additionally these groups have more than doubled their installation volume year on year, with 2015 seeing a total of 130MW, while 2016 is projected to be closer to 280MW. Big box retail locations offer some of the best potential spaces for solar power to be installed — on top of square, flat structures and in previously built parking lots. The average size of an installation by a company in this group is about 500kW — 75X the size of an average residential solar installation. The RE100 organization has signed up 81 global corporations (many on the SEIA list) who have pledged 100% renewable energy. “We’re incredibly proud of the progress we’ve made in improving building efficiencies and reducing environmental impact. Our commitment to installing solar panels on 500 stores and distribution centers by 2020 is evidence of that progress” — said John Leisen, vice president of property management at Target. The geographic breakdown of solar installations is based upon three main drivers — good sunlight, expensive electricity and state level renewable mandates, with Southern California having all three. The northeast USA, with its expensive electricity and aggressive clean energy push, has been on par with California (50% of total solar) for commercial installations. A report put together by the World Wildlife Fund (WWF) and the World Resources Institute (WRI) breaks down the various state level laws that support corporations going green — and, without surprise, it becomes clear that the legal support of renewable energy is a definite driver. Read more of this story at Slashdot.

Link:
Target Passes Walmart As Top US Corporate Installer of Solar Power

Tesla bans customers from using autonomous cars to earn money ride-sharing

Enlarge On Thursday night, Tesla announced the new Model X and Model S electric vehicles will now come with the necessary hardware to allow them to drive completely autonomously at a future point in time. But buried in the notes about this new functionality there was also a warning to future Tesla owners: don’t expect to be able to use your EV driving for Uber, Lyft, or any other ride-sharing service that isn’t owned by Tesla. On Tesla’s website , the section that describes the new “Full Self-Driving Capability” (A $3,000 option at the time of purchase, $4,000 after the fact) states “Please note also that using a self-driving Tesla for car sharing and ride hailing for friends and family is fine, but doing so for revenue purposes will only be permissible on the Tesla Network, details of which will be released next year.” In Elon Musk’s ” Master Plan part 2 ,” the company’s CEO included plans for a Tesla ride-sharing network, which we know know will be called the Tesla Network. However, no other information about this program has escaped into the wild as yet. Read 2 remaining paragraphs | Comments

See the original article here:
Tesla bans customers from using autonomous cars to earn money ride-sharing

T-Mobile punished by FCC for hidden limits on unlimited data

Enlarge T-Mobile USA failed to adequately disclose speed and data restrictions on its “unlimited data” plans and has agreed to pay a fine and provide some benefits to customers, the Federal Communications Commission said today. Like other carriers, T-Mobile slows the speeds of its unlimited data customers after they’ve used a certain amount of data each month; when these customers connect to congested cell towers, they receive lower speeds than customers without unlimited data plans. The throttling is applied after customers use 26GB in a month. “Under its ‘Top 3 Percent Policy,’ T-Mobile ‘de-prioritizes’ its ‘heavy’ data users during times of network contention or congestion,” the FCC said in an announcement today. “This potentially deprived these users of the advertised speeds of their data plan. According to consumers, this policy rendered data services ‘unusable’ for many hours each day and substantially limited their access to data.” Read 11 remaining paragraphs | Comments

More:
T-Mobile punished by FCC for hidden limits on unlimited data

Samsung 960 Pro review: The fastest consumer SSD you can buy

(credit: Edward Chester) The all new Samsung 960 Pro, released today, is the follow up to last year’s 950 Pro . It offers the same core set of features, with an M.2 form factor , four-lane PCIe 3.0 interface, NVMe communication standard, and 3D V-NAND. But the 960 Pro isn’t just a minor spec bump. Samsung has seriously cranked up the speed (and capacities) of its flagship drives to the point where such ludicrous performance may be lost on all but the most demanding of users. These are some seriously hardcore SSDs. Where the 950 Pro was available in just 256GB and 512GB versions, the 960 Pro starts at 512GB, with 1TB and 2TB versions also available. For the first time, you can reasonably consider replacing an entire array of spinner hard drives or even 2.5-inch SATA SSDs with these things—so long as you’ve got the cash, of course. With a 256GB starting capacity, Samsung was able to offer the speed, longevity, and warranty of the 950 Pro to those only able to budget £170 ($199) for an SSD. But with the 960 Pro starting at $329 for the 512GB model  (probably ~£330), rising to $629 for 1TB, and an eye-watering $1,299 for 2TB, you’ll need to save some extra pennies to buy one, or wait it out for the Evo drives Samsung is launching later this year. Although a marked step down from the Pro range in some regards, the Evos are in theory faster than the 950 Pro drives for less money (thanks to using cheaper and more tightly packed TLC V-NAND). The 250GB will cost just $129 (~£130), 500GB will be $249 and 1TB will cost $470. There won’t be a 2TB version of the 960 Evo. Read 35 remaining paragraphs | Comments

More here:
Samsung 960 Pro review: The fastest consumer SSD you can buy