NSA backdoor detected on >55,000 Windows boxes can now be remotely removed

Enlarge (credit: Countercept ) After Microsoft officials dismissed evidence that more than 10,000 Windows machines on the Internet were  infected by a highly advanced National Security Agency backdoor , private researchers are stepping in to fill the void. The latest example of this open source self-help came on Tuesday with the release of a tool that can remotely uninstall the DoublePulsar implant. On late Friday afternoon, Microsoft officials issued a one-sentence statement saying that they doubted the accuracy of multiple Internet-wide scans that found anywhere from 30,000 to slightly more than 100,000 infected machines. The statement didn’t provide any factual basis for the doubt, and officials have yet to respond on the record to requests on Tuesday for an update. Over the weekend, Below0day released the results of a scan that detected 56,586 infected Windows boxes, an 85-percent jump in the 30,626 infections the security firm found three days earlier. Both numbers are in the conservative end of widely ranging results from scans independently carried out by other researchers over the past week. On Monday, Rendition Infosec published a blog post saying DoublePulsar infections were on the rise and that company researchers are confident the scan results accurately reflect real-world conditions. Rendition founder Jake Williams told Ars that the number of infected machines is “well over 120k, but that number is a floor.” Read 4 remaining paragraphs | Comments

More:
NSA backdoor detected on >55,000 Windows boxes can now be remotely removed

Toyota Unveils Plan For Hydrogen Powered Semi Truck

New submitter omaha393 quotes a report from R&D Magazine: Toyota announced a new initiative on Wednesday aimed at advancing its work in vehicles powered by alternative energy sources. The automaker unveiled Project Portal, which is a novel hydrogen fuel cell system designed for heavy duty truck use at the Port of Los Angeles. A proof-of-concept truck powered by this fuel cell will be part of a feasibility study held at the Port this summer, with the goal of examining the potential of this technology in heavy-duty applications. The test vehicle will produce more than 670 horsepower and 1, 325 pound feet of torque from two of these novel fuel cell stacks along with a 12kWh battery. Overall, the combined weight capacity is 80, 000 pounds that will be carried over 200 miles. omaha393 adds: “While hydrogen fuel has been criticized due to high cost of production and safety concerns, recent advances in catalysis and solid storage systems have made the prospect of hydrogen fuel an attractive commercial prospect for the future.” Read more of this story at Slashdot.

View the original here:
Toyota Unveils Plan For Hydrogen Powered Semi Truck

Facebook Finally Rolls Out ‘Disputed News’ Tag Everyone Will Dispute

On Friday, Facebook debuted its new flagging system for fake news in America, tagging hoax stories as “disputed” for some users. First announced amid criticism of the company for its role in spreading misinformation during the 2016 election, the new feature uses non-partisan third parties to assess the factual… Read more…

More here:
Facebook Finally Rolls Out ‘Disputed News’ Tag Everyone Will Dispute

Library Creates Fake Patron Records To Avoid Book-Purging

An anonymous reader writes: Chuck Finley checked out 2, 361 books from a Florida library in just nine months, increasing their total circulation by 3.9%. But he doesn’t exist. “The fictional character was concocted by two employees at the library, complete with a false address and driver’s license number, ” according to the Orlando Sentinel. The department overseeing the library acknowledges their general rule is “if something isn’t circulated in one to two years, it’s typically weeded out of circulation.” So the fake patron scheme was concocted by a library assistant working with the library’s branch supervisor, who “said he wanted to avoid having to later repurchase books purged from the shelf.” But according to the newspaper the branch supervisor “said the same thing is being done at other libraries, too.” Read more of this story at Slashdot.

View post:
Library Creates Fake Patron Records To Avoid Book-Purging

New York’s District Attorney: Roll Back Apple’s iPhone Encryption

An anonymous reader quotes Mashable: Manhattan District Attorney Cyrus Vance said Thursday that he wants Apple’s encryption to go back to how it was in early 2014. Back then, police could basically extract any information they wanted after getting a warrant. “Doing nothing about this problem will perpetuate an untenable arms race between private industry and law enforcement, ” Vance said on Thursday. “Federal legislation is our only chance to lay these arms aside.” Vance said he’s got 423 “lawfully-seized Apple devices” that his employees can’t do anything with. Forty-two of those devices “pertain to homicide or attempted murder cases” according to the district attorney’s office, and a similar number “relate to sex crimes.” The argument, of course, is that the district attorney’s office would have an easier time solving crimes if they had access to these phones… Apple believes being forced to hack into phones at the government’s will is an unreasonable burden. ZDNet adds that “the call for federal legislation could be given a popular boost by president elect Donald Trump, who previously called for a boycott on Apple products when it refused to help the FBI.” Read more of this story at Slashdot.

See more here:
New York’s District Attorney: Roll Back Apple’s iPhone Encryption

Facebook Employees Tried To Remove Trump Posts As Hate Speech

An anonymous reader quotes a report from USA Today: Facebook employees pushed to remove some of Republican presidential candidate Donald Trump’s Facebook posts — such as one proposing the ban of Muslims from entering the U.S. — from the service as hate speech that violated the giant social network’s policies, the Wall Street Journal reported Friday. The decision not to remove the Trump posts was made by Facebook CEO Mark Zuckerberg, the newspaper reported. Employees complained that Facebook was changing the rules for Trump and some who review content on Facebook threatened to quit. “When we review reports of content that may violate our policies, we take context into consideration. That context can include the value of political discourse, ” Facebook said in an emailed statement. “Many people are voicing opinions about this particular content and it has become an important part of the conversation around who the next U.S. president will be. For those reasons, we are carefully reviewing each report and surrounding context relating to this content on a case by case basis.” Senior members of Facebook’s policy team posted more details on its policy on Friday: “In the weeks ahead, we’re going to begin allowing more items that people find newsworthy, significant, or important to the public interest — even if they might otherwise violate our standards.” Read more of this story at Slashdot.

Read the original:
Facebook Employees Tried To Remove Trump Posts As Hate Speech

Clinton’s private e-mail was blocked by spam filters—so State IT turned them off

Part of an e-mail thread discussing workarounds to keep Hillary Clinton’s private e-mail server from being blocked by security filters at the State Department. 2 more images in gallery Documents recently obtained by the conservative advocacy group Judicial Watch show that in December 2010, then-US Secretary of State Hillary Clinton and her staff were having difficulty communicating with State Department officials by e-mail because spam filters were blocking their messages. To fix the problem, State Department IT turned the filters off—potentially exposing State’s employees to phishing attacks and other malicious e-mails. The mail problems prompted Clinton Chief of Staff Huma Abedin to suggest to Clinton, “We should talk about putting you on State e-mail or releasing your e-mail address to the department so you are not going to spam.” Clinton replied, “Let’s get [a] separate address or device but I don’t want any risk of the personal [e-mail] being accessible.” The mail filter system—Trend Micro’s ScanMail for Exchange 8—was apparently causing some messages from Clinton’s private server (Clintonemail.com) to not be delivered. Some were “bounced;” others were accepted by the server but were quarantined and never delivered to the recipient. According to the e-mail thread published yesterday by Judicial Watch, State’s IT team turned off both spam and antivirus filters on two “bridgehead” mail relay servers while waiting for a fix from Trend Micro. Read 4 remaining paragraphs | Comments

Originally posted here:
Clinton’s private e-mail was blocked by spam filters—so State IT turned them off

Apple Invests $1 Billion In Uber’s Chinese Rival Didi

An anonymous reader quotes a report from Bloomberg: Apple Inc. invested $1 billion in Chinese ride-sharing service Didi, making one of its biggest bets on software and services and dealing a blow to Uber Technologies Inc.’s ambitions in the country. The iPhone maker will help Uber’s largest rival build up a ride-sharing platform that handles more than 11 million rides a day and serves about 300 million users across China, Didi said in a statement on Friday. Executive Officer Tim Cook has highlighted higher-margin services as a growth area and suggested he would use some of its $200 billion-plus cash hoard for investments. The investment in one of China’s largest online companies will allow Apple to forge alliances in its single largest market outside of the United States. Didi, incorporated as Xiaoju Kuaizhi Inc., is in the process of raising more than $2 billion at a valuation of about $25 billion, people familiar with the matter have said. It operates in 400 Chinese cities and works with more than 14 million Chinese car owners. The company is Uber’s most potent rival and has formed an international coalition with Lyft Inc. in the U.S., India’s Ola and Southeast Asia’s Grab to fight the globally expanding San Francisco firm. Apple is hoping to reinvigorate lackluster iPhone sales in China with its $1 billion investment in Didi. The last big investment the company made was when it acquired Beats for $3 billion in 2014. Read more of this story at Slashdot.

See more here:
Apple Invests $1 Billion In Uber’s Chinese Rival Didi

Apple Disables Trim Support On 3rd Party SSDs In OS X

MojoKid (1002251) writes One of the disadvantages to buying an Apple system is that it generally means less upgrade flexibility than a system from a traditional PC OEM. Over the last few years, Apple has introduced features and adopted standards that made using third-party hardware progressively more difficult. Now, with OS X 10.10 Yosemite, the company has taken another step down the path towards total vendor lock-in and effectively disabled support for third-party SSDs. We say “effectively” because while third-party SSDs will still work, they’ll no longer perform the TRIM garbage collection command. Being able to perform TRIM and clean the SSD when its sitting idle is vital to keeping the drive at maximum performance. Without it, an SSD’s real world performance will steadily degrade over time. What Apple did with OS X 10.10 is introduce KEXT (Kernel EXTension) driver signing. KEXT signing means that at boot, the OS checks to ensure that all drivers are approved and enabled by Apple. It’s conceptually similar to the device driver checks that Windows performs at boot. However, with OS X, if a third-party SSD is detected, the OS will detect that a non-approved SSD is in use, and Yosemite will refuse to load the appropriate TRIM-enabled driver. Read more of this story at Slashdot.

More:
Apple Disables Trim Support On 3rd Party SSDs In OS X