Yahoo executives allowed the head of the company’s Human Rights Trust to use $13 million — the bulk of the organization’s funding — for personal gain, according to a federal lawsuit filed today in DC. These allegations aren’t new and the trust itself was dissolved in 2015 after years of suspicious activity, but today’s lawsuit puts Yahoo on the hook for $17.3 million, at least. The Yahoo Human Rights Trust entered and exited this world under unfortunate circumstances. Yahoo established it in 2007 as part of a settlement with Chinese dissidents who were imprisoned in part because Yahoo cooperated with the Chinese government. The company had revealed the identities of Yahoo email users who were sharing messages Chinese authorities objected to, leading to their arrest and years of detainment, in some cases. In the fall of 2007, Yahoo paid each affected family $3.2 million, CEO Jerry Yang was reprimanded by Congress live on television, and the company established the Yahoo Human Rights Trust , a $17.3 million fund meant to aid victims of Chinese rights abuses. It elected Harry Wu, a former political activist who spent 19 years in Chinese labor camps, to lead the effort. Today’s lawsuit was brought by eight plaintiffs who had been imprisoned in China for using the internet to express dissident opinions or share information the government found objectionable, making them “past and future potential beneficiaries” of the Yahoo Human Rights Trust. They claimed Wu misused $13 million of the fund’s $17.3 million, while Yahoo executives turned a blind eye to his actions. The lawsuit said Wu, who died in 2016, used the Human Rights Trust as a piggy bank, directly paying himself and his wife more than $1 million between 2007 to 2015. It also claimed he spent $4 million on a museum about Chinese prison camps and other real estate for his own non-profit, the Laogai Research Foundation. Plus, the plaintiffs alleged Wu used trust money for a series of personal lawsuits, some of which accused him of mismanaging federal grants and sexual harassment. Just $700, 000 of the fund’s $17.3 million was used to directly aid imprisoned dissidents, according to the suit. Plaintiffs claimed Yahoo executives were aware of Wu’s mismanagement and did nothing, even after they received letters from Laogai Research Foundation employees and others concerned that the trust was being misused. “He will harm the organization and damage the image of Yahoo, ” Wu’s assistant wrote to executives in 2010. “Scandals will be exposed and it would be a heavy blow to the human rights issue in China.” Meanwhile, Yahoo continued to point to the trust as an example of its commitment to supporting freedom of expression and human rights, according to the suit. As suspicions about the trust’s finances grew, Yahoo dissolved it in 2015. The plaintiffs in today’s case want Yahoo to replenish the full $17.3 million trust and change its wording so it can benefit only Chinese dissidents, and they’re asking for all money unlawfully spent by Wu to be returned. Yahoo — which was recently bought by Verizon , endured a handful of scandals and was absorbed into Oath — declined to comment on this story, citing pending litigation.
Read the original:
Yahoo misused millions meant for humanitarian aid, lawsuit claims
“A backdoor has been found in devices made by a Chinese tech firm specializing in VoIP products, ” reports TechRadar. An anonymous reader quotes their article: Security outfit Trustwave made the discovery of a hidden backdoor in DblTek’s devices which was apparently put there to allow the manufacturer access to said hardware — but of course, it’s also open to being exploited by other malicious parties. The backdoor is in the Telnet admin interface of DblTek-branded devices, and potentially allows an attacker to remotely open a shell with root privileges on the target device. What’s perhaps even more worrying is that when Trustwave contacted DblTek regarding the backdoor last autumn — multiple times — patched firmware was eventually released at the end of December. However, rather than removing the flaw, the vendor simply made it more difficult to access and exploit. And further correspondence with the Chinese company has apparently fallen on deaf ears. The firmware with the hole “is present on almost every GSM-to-VoIP device which DblTek makes, ” and Trustwave “found hundreds of these devices on the net, and many other brands which use the same firmware, so are equally open to exploit.” Read more of this story at Slashdot. 
China, the world’s second largest economy, is pouring 1.5 billion yuan ($168 million) into a program aimed at making it rain in its usually arid northwestern region. From a report: No stranger to using technologies like cloud seeding to influence and even control weather patterns, China’s top economic planners recently gave the go ahead for what will be one of the country’s largest weather-modification projects, reports the South China Morning Post. According to the Post, a feasibility study by the country’s meteorological agency concluded that the three-year program could see a rise in precipitation over an area of 960, 000 sq km, or as much as 10% of the country’s landmass. The multi-million dollar budget allocated by the National Development and Reform Commission will reportedly cover the cost for four new aircraft and updates to eight existing planes, nearly 900 rocket launch systems and over 1, 800 digital control devices. Read more of this story at Slashdot. 
An anonymous reader writes: Microsoft had last week said that it wouldn’t be releasing a new Windows 10 build for insiders on Fast ring this year. But the supposed build has leaked online. The build 14997 contains a few new features, such as a refreshed Settings app, theme support from the Store (you might recall that with 14986, you could download them from the Store, but had to install them manually), a number of Edge improvements such as tab expansion, blue light reduction features, and more. Since it’s a leaked build, we would suggest treading carefully before downloading it. You might just want to avoid it until it’s available from the official channel. Read more of this story at Slashdot.