Comcast’s nationwide outage was caused by a configuration error

Yesterday, folks across the country reported that Comcast internet was down — an unusually large outage that lasted around 90 minutes. It turns out that the problem was caused by Level 3, an enterprise ISP that provides the backbone for other internet providers like Verizon, Comcast and RCN. “Our network experienced a service disruption affecting some of our customers, ” the firm said in a statement. “The disruption was caused by a configuration error.” The outage shows yet again just how vulnerable the internet is in the US. Last year around this time, a DDoS attack shut down Spotify, Twitter, the New York Times and other sites, prompting some soul-searching from ISPs and internet security experts. This time it was a case of simple human error, but the results were similar: The internet, which many individuals and businesses now depend on for their livelihoods, went down. Level 3 internet backbone currently has disruptions affecting U.S. RCN immediately rerouted to alternate backbone. RCN service normal. — RCN (@RCNconnects) November 6, 2017 The problem, according to an expert contact by Wired , was a “route leak.” ISPs use something called the Border Gateway Protocol to find networks they can route data packets through. To figure out which routes are the most efficient, so-called Autonomous Systems (ASes) track data packets that are moving through various networks. A route leak is caused when these ASes relay bad information about their IP addresses. That can cause internet providers to make bad or inefficient routing decisions, causing packets to be delayed or stopped altogether. A good example of this is an error Level 3 made back in 2015 . In that case, a telecom in Malaysia accidentally told Level 3 that it could relay internet data from anywhere around the world. Level 3 accepted the routes, even thought it shouldn’t have, causing worldwide data to be shunted through the Malaysian telecom, which had no way of handling all the traffic. Something similar could have happened yesterday if Level 3 was, say, tweaking its routing settings and made a mistake. ISPs use filters to guard against such errors, but the scale of the internet makes it difficult to catch them all. After last year’s large DDoS attack, security experts pointed out that internet infrastructure providers like Dyn and Level 3 are particularly vulnerable to attacks. Yesterday’s outage shows how vulnerable they are to human error, too. Via: Wired Source: Comcast

View the original here:
Comcast’s nationwide outage was caused by a configuration error

Nintendo expects Switch will beat Wii U lifetime sales in a year

Nintendo has announced it’s sold a further 2.93 million Switch consoles over the latest quarter, reaching just shy of 8 million units total. After another strong quarter, the company is now aiming to sell 14 million units by the time the Switch turns one year old — up from 10 million it aimed for previously. It’s also increased its forecast for the full year, from $6.59 billion to $8.44 billion. If Nintendo hits its targets, that would mean the Switch could best its predecessor, the Wii U, in a single year. The older console only reached 13.56 million sales over the entirety of its five-year lifetime — it wasn’t a hit for the games maker. Nintendo racked up $209 million in profit for the quarter, with revenues reaching $1.93 billion. The company managed to sell 22 million game titles in the last half year — a figure that doesn’t account for the recently launched Super Mario Odyssey , which is likely to sell consoles all by itself . According to a Reuters report , the company is now endeavoring to meet customer demand — it’s still not easy to buy a Switch in stores. “We’ve boosted Switch production in order to meet strong demand from our customers as it was difficult for customers to buy the consoles at retail stores, ” said Nintendo President Tatsumi Kimishima . While Nintendo doesn’t spin out mobile sales, it reported a revenue increases over 420 percent since last year, lead by Super Mario Run and Fire Emblem Heroes . It looks like the company has found a whale or two . The holy grail for in-app payment centric games, these players invest a lot of time and money into smartphone games. Animal Crossing will be the company’s next smartphone game property , and will also include in-app purchases to help deck out your digital campsite. Source: Nintendo

View article:
Nintendo expects Switch will beat Wii U lifetime sales in a year

Charter has moved millions of customers to new—and often higher—pricing

Enlarge / A Charter Spectrum vehicle. (credit: Charter ) Charter Communications has moved 30 percent of the customers it acquired in a blockbuster merger onto new pricing plans, resulting in many people paying higher prices. Charter closed the acquisitions of Time Warner Cable (TWC) and Bright House Networks in May 2016. Before the merger, Charter had about 6.8 million customers; afterwards, Charter had 25.4 million customers in 41 states and became the second-largest US cable company after Comcast. The merger was quickly followed by customer complaints about pricing in the acquired territories. In November 2016 , we noted that “tens of thousands of ex-Time Warner Cable video subscribers have canceled their service since the company was bought by Charter, and pricing changes appear to be the driving factor.” At the time, Charter CEO Thomas Rutledge explained that the TWC video customer base was “mispriced” and needed to be moved “in the right direction.” Read 11 remaining paragraphs | Comments

Read the article:
Charter has moved millions of customers to new—and often higher—pricing

Volkswagen unveils Sedric, its first fully autonomous vehicle

Volkswagen Group Volkswagen’s plans to develop fully autonomous vehicles that would offer greater comfort and convenience than current cars, while slashing the number of road deaths and truly democratizing mobility, have borne their first fruit. This is Sedric, designed to be a platform for cross-brand ideas, which will feed into subsequent concepts from the group’s car brands. The biggest idea it introduces is its full “Level 5” autonomy: no human driver is required. There’s no VW badge on the front of Sedric because this is the first concept car built by the Volkswagen Group, rather than the Volkswagen car brand. It was devised, designed, developed and constructed by Volkswagen Group’s Future Center Europe in Potsdam and Volkswagen Group Research in Wolfsburg. “We are systematically focusing on our customers, their wishes and requirements for the mobility of the future,” says chief designer Michael Mauer. “The Volkswagen Group Future Centers give us the opportunity to conceptualize and develop new ideas of mobile life.” Read 8 remaining paragraphs | Comments

See the original article here:
Volkswagen unveils Sedric, its first fully autonomous vehicle

AT&T ordered to pay $7.75 million for bogus directory assistance tools

US telecom providers have a pretty bad rap, and today we’re finding out that some AT&T customers ended up paying money they shouldn’t have thanks to some scammers. The FCC just released a statement noting that it reached a settlement with AT&T in which the carrier will pay $7.75 million after it accidentally allowed scammers to charge $9 a month to unsuspecting wireline customers for a “sham” directory assistance service. Adding insult to injury, it seems this service was set up as a tool to help launder money; the scam was originally uncovered by the DEA. AT&T said in a statement that “two companies that engaged in a sophisticated fraud scheme were apparently able to circumvent those protections and submit unauthorized third-party charges that were billed by AT&T.” According to the FCC, AT&T received a fee each time this fraudulent service appeared on a customer’s bill, but the so-called service provider never actually provided anything to these customers, most of which were small businesses. Out of the $7.75 million AT&T is paying up, $6.8 million will go towards refunds and a paltry $950, 000 will go to the US treasury as a fine. Given that AT&T pulled in $40.5 billion in revenue in its most recent quarter, it’s a stretch to call that fine even a slap on the wrist. This is hardly the first time US telecom providers have gotten in trouble for such shady practices — in 2014, AT&T itself paid a much larger $105 million settlement for cramming false charges onto its customers’ bills. T-Mobile also paid $90 million in a 2014 settlement , while Verizon and Sprint paid $90 million and $68 million, respectively, last winter. We’re hoping the FCC continues to pay close attention to these shady practices. AT&T’s full statement is below: “Consistent with industry practices, AT&T wireline telephone customers have been able to purchase certain telecommunications services from third parties and have charges for those services billed on their telephone bill. We have implemented strict requirements on third parties submitting charges for AT&T bills to ensure that all charges are authorized by our customers; indeed, those requirements go beyond the requirements of FCC rules and impose safeguards that the FCC proposed but never adopted. Nonetheless, unbeknownst to us, two companies that engaged in a sophisticated fraud scheme were apparently able to circumvent those protections and submit unauthorized third-party charges that were billed by AT&T.” “Today, we reached a settlement with the FCC to resolve all claims associated with these companies and the related charges. Pursuant to the settlement, we will provide refunds for all charges on behalf of these two companies going back to January 1, 2012. Affected former and current AT&T wireline telephone customers will receive these refunds via check within 90 days. We stopped billing for these entities as of June 2015 and will also cease wireline third-party billing for other third parties, with limited exceptions.” Source: FCC

Visit site:
AT&T ordered to pay $7.75 million for bogus directory assistance tools

Millions of Android devices have flawed full disk encryption

Hackers can use brute force to break into tens of millions of Android devices using full disk encryption, thanks to a series of security issues linked specifically to Android kernel flaws and Qualcomm processors, Neowin reports. The vulnerabilities were uncovered by security researcher Gal Beniamini , who is working with Google and Qualcomm to patch the problems — and some of the flaws have already been addressed. However, a few of the issues may not be patchable, instead requiring new hardware, the report says. Any phone using Android 5.0 or later uses full disk encryption, the same security feature at the heart of Apple’s recent fight with the FBI . Full disk encryption makes all data on a device unrecognizable without a unique key. Even though modern Android devices use this security feature, Beniamini’s research found that an attacker can exploit kernel flaws and vulnerabilities in some of Qualcomm’s security measures to get that encryption key. Then, all that stands between the hacker and a device’s information is a password. Since any attack on an Android device would still require brute force and additional hacking methods, this isn’t an immediate security threat for a majority of users. But, it is notable for those who put their complete trust in full disk encryption. We’ve reached out to Qualcomm for comment on the flaw and will update this story as the company responds. Update: A Qualcomm spokesperson gave Engadget the following comment: “Providing technologies that support robust security and privacy is a priority for Qualcomm Technologies, Inc. (QTI). QTI continues to work proactively both internally as well as with security researchers such as Gal Beniamini to identify and address potential security vulnerabilities. The two security vulnerabilities (CVE-2015-6639 and CVE-2016-2431) discussed in Beniamini’s June 30 blog post were also discovered internally and patches were made available to our customers and partners. We have and will continue to work with Google and the Android ecosystem to help address security vulnerabilities and to recommend improvements to the Android ecosystem to enhance security overall.” Source: Gal Beniamini

More here:
Millions of Android devices have flawed full disk encryption

Russian software security firm Kaspersky threatened to ‘rub out’ rival, email reveals

A hot tech intrigue story from Joe Menn at Reuters on alleged dirty-doings between Kaspersky and its rivals. Read the rest

View the original here:
Russian software security firm Kaspersky threatened to ‘rub out’ rival, email reveals