Encrypted WhatsApp Message Recovered From Westminster Terrorist’s Phone

Bruce66423 brings word that a terrorist’s WhatsApp message has been decrypted “using techniques that ‘cannot be disclosed for security reasons’, though ‘sources said they now have the technical expertise to repeat the process in future.'” The Economic Times reports: U.K. security services have managed to decode the last message sent out by Khalid Masood before he rammed his high-speed car into pedestrians on Westminster Bridge and stabbed to death a police officer at the gates of Parliament on March 22. The access to Masood’s message was achieved by what has been described by security sources as a use of “human and technical intelligence”… The issue of WhatsApp’s encrypted service, which is closed to anyone besides the sender and recipient, had come under criticism soon after the attack. “It’s completely unacceptable. There should be no place for terrorists to hide. We need to make sure that organisations like WhatsApp, and there are plenty of others like that, don’t provide a secret place for terrorists to communicate with each other, ” U.K. home secretary Amber Rudd had said. Security sources say the message showed the victim’s motive was military action in Muslim countries, while the article adds that though ISIS claimed responsibility for the attack, “no evidence has emerged to back this up.” Read more of this story at Slashdot.

Originally posted here:
Encrypted WhatsApp Message Recovered From Westminster Terrorist’s Phone

Open Ports Create Backdoors In Millions of Smartphones

An anonymous reader writes: “Mobile applications that open ports on Android smartphones are opening those devices to remote hacking, claims a team of researchers from the University of Michigan, ” reports Bleeping Computer. Researchers say they’ve identified 410 popular mobile apps that open ports on people’s smartphones. They claim that an attacker could connect to these ports, which in turn grant access to various phone features, such as photos, contacts, the camera, and more. This access could be leveraged to steal photos, contacts, or execute commands on the target’s phone. Researchers recorded various demos to prove their attacks. Of these 410 apps, there were many that had between 10 and 50 million downloads on the official Google Play Store and even an app that came pre-installed on an OEMs smartphones. “Research on the mobile open port problem started after researchers read a Trend Micro report from 2015 about a vulnerability in the Baidu SDK, which opened a port on user devices, providing an attacker with a way to access the phone of a user who installed an app that used the Baidu SDK, ” reports Bleeping Computer. “That particular vulnerability affected over 100 million smartphones, but Baidu moved quickly to release an update. The paper detailing the team’s work is entitled Open Doors for Bob and Mallory: Open Port Usage in Android Apps and Security Implications, and was presented Wednesday, April 26, at the 2nd IEEE European Symposium on Security and Privacy that took place this week in Paris, France.” Read more of this story at Slashdot.

View original post here:
Open Ports Create Backdoors In Millions of Smartphones

A Database of Thousands of Credit Cards Was Left Exposed on the Open Internet

A US online pet store has exposed the details of more than 110, 400 credit cards used to make purchases through its website, researchers have found. From a report on ZDNet: In a stunning show of poor security, the Austin, TX-based company FuturePets.com exposed its entire customer database, including names, postal and email addresses, phone numbers, credit card information, and plain-text passwords. Several customers that we reached out to confirmed some of their information when it was provided by ZDNet, but did not want to be named. The database was exposed because of the company’s own insecure server and use of “rsync, ” a common protocol used for synchronizing copies of files between two different computers, which wasn’t protected with a username or password. Read more of this story at Slashdot.

Read the original:
A Database of Thousands of Credit Cards Was Left Exposed on the Open Internet

Facebook and Google Were Victims of $100M Payment Scam

Employees of Facebook and Google were the victims of an elaborate $100 million phishing attack, according to a new report on Fortune, which further adds that the employees were tricked into sending money to overseas bank accounts. From the report: In 2013, a 40-something Lithuanian named Evaldas Rimasauskas allegedly hatched an elaborate scheme to defraud U.S. tech companies. According to the Justice Department, he forged email addresses, invoices, and corporate stamps in order to impersonate a large Asian-based manufacturer with whom the tech firms regularly did business. The point was to trick companies into paying for computer supplies. The scheme worked. Over a two-year span, the corporate imposter convinced accounting departments at the two tech companies to make transfers worth tens of millions of dollars. By the time the firms figured out what was going on, Rimasauskas had coaxed out over $100 million in payments, which he promptly stashed in bank accounts across Eastern Europe. Fortune adds that the investigation raises questions about why the companies have so far kept silence and whether — as a former head of the Securities and Exchange Commission observes — it triggers an obligation to tell investors about what happened. Read more of this story at Slashdot.

View original post here:
Facebook and Google Were Victims of $100M Payment Scam

Microsoft Will Support Python In SQL Server 2017

There was a surprise in the latest Community Technology Preview release of SQL Server 2017. An anonymous reader quotes InfoWorld: Python can now be used within SQL Server to perform analytics, run machine learning models, or handle most any kind of data-powered work. This integration isn’t limited to enterprise editions of SQL Server 2017, either — it’ll also be available in the free-to-use Express edition… Microsoft has also made it possible to embed Python code directly in SQL Server databases by including the code as a T-SQL stored procedure. This allows Python code to be deployed in production along with the data it’ll be processing. These behaviors, and the RevoScalePy package, are essentially Python versions of features Microsoft built for SQL Server back when it integrated the R language into the database… An existing Python installation isn’t required. During the setup process, SQL Server 2017 can pull down and install its own edition of CPython 3.5, the stock Python interpreter available from the Python.org website. Users can install their own Python packages as well or use Cython to generate C code from Python modules for additional speed. Except it’s not yet available for Linux users, according to the article. “Microsoft has previously announced SQL Server would be available for Linux, but right now, only the Windows version of SQL Server 2017 supports Python.” Read more of this story at Slashdot.

See more here:
Microsoft Will Support Python In SQL Server 2017

Diet Sodas May Be Tied To Stroke, Dementia Risk

Gulping down an artificially sweetened beverage not only may be associated with health risks for your body, but also possibly your brain, a new study suggests. From a report: Artificially sweetened drinks, such as diet sodas, were tied to a higher risk of stroke and dementia in the study, which published in the American Heart Association’s journal Stroke on Thursday. The study sheds light only on an association, as the researchers were unable to determine an actual cause-and-effect relationship between sipping artificially sweetened drinks and an increased risk for stroke and dementia. Therefore, some experts caution that the findings should be interpreted carefully. No connection was found between those health risks and other sugary beverages, such as sugar-sweetened sodas, fruit juice and fruit drinks. Read more of this story at Slashdot.

View post:
Diet Sodas May Be Tied To Stroke, Dementia Risk

Physicists Observe ‘Negative Mass’

Physicists have created a fluid with “negative mass, ” which accelerates towards you when pushed. From a report on BBC: In the everyday world, when an object is pushed, it accelerates in the same direction as the force applied to it; this relationship is described by Isaac Newton’s Second Law of Motion. But in theory, matter can have negative mass in the same sense that an electric charge can be positive or negative. Prof Peter Engels, from Washington State University (WSU), and colleagues cooled rubidium atoms to just above the temperature of absolute zero (close to -273C), creating what’s known as a Bose-Einstein condensate. In this state, particles move extremely slowly, and following behaviour predicted by quantum mechanics, acting like waves. They also synchronise and move together in what’s known as a superfluid, which flows without losing energy. Read more of this story at Slashdot.

See the original article here:
Physicists Observe ‘Negative Mass’

StarCraft Is Now Free, Nearly 20 Years After Its Release

An anonymous reader quotes a report from TechCrunch: Nearly two decades after its 1998 release, StarCraft is now free. Legally! Blizzard has just released the original game — plus the Brood War expansion — for free for both PC and Mac. You can find it here. Up until a few weeks ago, getting the game with its expansion would’ve cost $10-15 bucks. The company says they’ve also used this opportunity to improve the game’s anti-cheat system, add “improved compatibility” with Windows 7, 8.1, and 10, and fix a few long lasting bugs. So why now? The company is about to release a remastered version of the game in just a few months, its graphics/audio overhauled for modern systems. Once that version hits, the original will probably look a bit ancient by comparison — so they might as well use it to win over a few new fans, right? Read more of this story at Slashdot.

More:
StarCraft Is Now Free, Nearly 20 Years After Its Release

Cylance Accused of Distributing Fake Malware Samples To Customers To Close Deals

New submitter nyman19 writes: Ars Technica reports how security vendor Cylance has been distributing non-functioning malware samples to prospective customers in order to “close the sale[s] by providing files that other products wouldn’t detect” According to the report: “A systems engineer at a large company was evaluating security software products when he discovered something suspicious. One of the vendors [Cylance] had provided a set of malware samples to test — 48 files in an archive stored in the vendor’s Box cloud storage account. The vendor providing those samples was Cylance, the information security company behind Protect, a ‘next generation’ endpoint protection system built on machine learning. In testing, Protect identified all 48 of the samples as malicious, while competing products flagged most but not all of them. Curious, the engineer took a closer look at the files in question — and found that seven weren’t malware at all.” Read more of this story at Slashdot.

Read More:
Cylance Accused of Distributing Fake Malware Samples To Customers To Close Deals

‘Breakthrough’ LI-RAM Material Can Store Data With Light

A Vancouver researcher has patented a new material that uses light instead of electricity to store data. An anonymous reader writes: LI-RAM — that’s light induced magnetoresistive random-access memory — promises supercomputer speeds for your cellphones and laptops, according to Natia Frank, the materials scientist at the University of Victoria who developed the new material as part of an international effort to reduce the heat and power consumption of modern processors. She envisions a world of LI-RAM mobile devices which are faster, thinner, and able to hold much more data — all while consuming less power and producing less heat. And best of all, they’d last twice as long on a single charge (while producing almost no heat), according to a report on CTV News, which describes this as “a breakthrough material” that will not only make smartphones faster and more durable, but also more energy-efficient. The University of Victoria calculates that’s 10% of the world’s electricity is consumed by “information communications technology, ” so LI-RAM phones could conceivably cut that figure in half. They also report that the researcher is “working with international electronics manufacturers to optimize and commercialize the technology, and says it could be available on the market in the next 10 years.” Read more of this story at Slashdot.

View article:
‘Breakthrough’ LI-RAM Material Can Store Data With Light