Microsoft Says Windows 10 Version 1607 is The Most Secure Windows Ever

A new white paper from Microsoft claims that “devices running Windows 10 are 58% less likely to encounter ransomware than when running Windows 7”. But an anonymous reader brings more news from Windows-watcher Paul Thurrott: in a separate blog post, it also makes its case for why Windows 10 version 1607 — that is, Windows 10 with the Anniversary Update installed — is the most secure Windows version yet. Improvements in this release include: Microsoft Edge runs Adobe Flash Player in an isolated container, and Edge exploits cannot execute other applications… [And] the Windows Defender signature delivery channel works faster than before so that the in-box anti-virus and anti-malware solution can help block ransomware, both in the cloud and on the client. Additionally, Windows Defender responds to new threats faster using improved cloud protection and automatic sample submission features, plus improved behavioral heuristics aimed at detecting ransomware-related activities. Interestingly, the paper also touts Microsoft’s “Advancing machine-learning systems in our email services to help stop the spread of ransomware via email delivery.” Read more of this story at Slashdot.

More:
Microsoft Says Windows 10 Version 1607 is The Most Secure Windows Ever

Hack Exposes 412 Million Accounts on AdultFriendFinder Sites

“Almost every account password was cracked, thanks to the company’s poor security practices, ” reports ZDNet — even for “deleted” accounts. An anonymous reader quotes their article: The hack includes 339 million accounts from AdultFriendFinder.com, which the company describes as the “world’s largest sex and swinger community [and] also includes over 15 million “deleted” accounts that weren’t purged from the databases. On top of that, 62 million accounts from Cams.com, and 7 million from Penthouse.com were stolen, as well as a few million from other smaller properties owned by the company. The data accounts for two decades’ worth of data from the company’s largest sites, according to breach notification LeakedSource, which obtained the data… The three largest site’s SQL databases included usernames, email addresses, and the date of the last visit, and passwords, which were either stored in plaintext or scrambled with the SHA-1 hash function, which by modern standards isn’t cryptographically as secure as newer algorithms. The attack apparently coincides with the discovery of “a local file inclusion flaw on the AdultFriendFinder site, which if successfully exploited could allow an attacker to remotely run malicious code on the web server. ” Ironically, Friend Finder Networks doesn’t even own Penthouse.com anymore. They sold the site to a new owner last February. Read more of this story at Slashdot.

View post:
Hack Exposes 412 Million Accounts on AdultFriendFinder Sites

Alibaba Posts $1 Billion in Sales in 5 Minutes on Singles’ Day

Alibaba Group posted $1 billion (6.81 billion yuan) of sales within the first five minutes of its Singles’ Day sales, a 24-hour event that may offer clues on the health of the Chinese economy and its largest online retailer. From a report on Bloomberg:Investors are keeping a close eye on the annual Nov. 11 spending blitz that dwarfs Black Friday and Cyber Monday in the U.S., to see if Alibaba can reprise the 60 percent leap in transactions to 91.2 billion yuan it managed last year. The e-commerce giant again turned up the star-wattage for 2016, enlisting Hollywood actress Scarlett Johansson, sports celebrity David Beckham, basketball legend Kobe Bryant and pop-rock band One Republic to headline a pre-sale gala and drum up international attention. Pioneered by Alibaba in 2009 and since replicated by rivals including JD.com Inc., Singles’ Day has become somewhat of a barometer of Chinese consumer sentiment. Read more of this story at Slashdot.

See the original article here:
Alibaba Posts $1 Billion in Sales in 5 Minutes on Singles’ Day

Web of Trust, Downloaded 140M Times, Pulled From Extension Stores After Revelations That It Sells Users’ Data

According to multiple reports, Web of Trust, one of the top privacy and security extensions for web browsers with over 140 million downloads, collects and sells some of the data of its users — and it does without properly anonymizing it. Upon learning about this, Mozilla, Google and Opera quickly pulled the extension off their respective extension stores. From a report on The Register: A browser extension which was found to be harvesting users’ browsing histories and selling them to third parties has had its availability pulled from a number of web browsers’ add-on repositories. Last week, an investigative report by journalists at the Hamburg-based German television broadcaster, Norddeutscher Rundfunk (NDR), revealed that Web of Trust Services (WoT) had been harvesting netizens’ web browsing histories through its browser add-on and then selling them to third parties. While WoT claimed it anonymised the data that it sold, the journalists were able to identify more than 50 users from the sample data it acquired from an intermediary. NDR quoted the data protection commissioner of Hamburg, Johannes Caspar, criticising WoT for not adequately establishing whether users consented to the tracking and selling of their browsing data. Those consent issues have resulted in the browser add-on being pulled from the add-on repositories of both Mozilla Firefox and Google Chrome, although those who have already installed the extension in their browsers will need to manually uninstall it to stop their browsing being tracked. Read more of this story at Slashdot.

More:
Web of Trust, Downloaded 140M Times, Pulled From Extension Stores After Revelations That It Sells Users’ Data

DDoS Attack Halts Heating in Finland Amidst Winter

A Distributed Denial of Service (DDoS) attack halted heating distribution at least in two properties in the city of Lappeenranta, located in Eastern Finland. In both of these events, the attacks disabled the computers that were controlling heating in the buildings. An anonymous reader writes: Both of the buildings were managed by Valtia, the company which is in charge of managing the buildings overall operation and maintenance. According to Valtia CEO, Simo Ruonela, in both cases the systems that controlled the central heating and warm water circulation were disabled. In the city of Lappeenranta, there were at least two buildings whose systems were knocked down by the network attack. According to Rounela, the attack in Eastern Finland lasted from late October to Thursday — the 3rd of November. The systems that were attacked tried to respond to the attack by rebooting the main control circuit. This was repeated over and over so that heating was never working. Read more of this story at Slashdot.

View the original here:
DDoS Attack Halts Heating in Finland Amidst Winter

First Color Images Produced By an Electron Microscope

Slashdot reader sciencehabit quotes Science magazine: Imagine spending your whole life seeing the world in black and white, and then seeing a vase of roses in full color for the first time. That’s kind of what it was like for the scientists who have taken the first multicolor images of cells using an electron microscope. Electron microscopes can magnify an object up to 10 million times, allowing researchers to peer into the inner workings of, say, a cell or a fly’s eye, but until now they’ve only been able to see in black and white. The new advance — 15 years in the making — uses three different kinds of rare earth metals called lanthanides…layered one-by-one over cells on a microscope slide. The microscope detects when each metal loses electrons and records each unique loss as an artificial color. Read more of this story at Slashdot.

See the article here:
First Color Images Produced By an Electron Microscope

The FBI Spent Two Years Investigating An Online Cult That Didn’t Exist

A two-year FBI investigation apparently centered on the satirical web site “GodHatesGoths”. Long-time Slashdot reader v3rgEz writes: In 2005, the FBI launched an investigation into the “Church of the Hammer, ” a fundamentalist Christian sect which called for the wholesale slaughter of practitioners of the goth subculture. Two years later, the investigation was closed, on grounds that the Church didn’t exist. The FBI’s threat assessment detailed “an extremely right-wing Christian group that adheres to a Middle Ages Catholic text called the ‘Malleus Malificarum.'” But MuckRock.com reports that “The Bureau’s main source on the case was a goth who had engaged with members of the Church via their Yahoo Group…trying to dispel their misconceptions about the relationship between the subculture and Satanism.” After two years of scouring through crime databases and making phone calls to the Salem police department, FBI investigators actually visited the GodHatesGoths web site — which turned out to be a parody. Read more of this story at Slashdot.

Read More:
The FBI Spent Two Years Investigating An Online Cult That Didn’t Exist

A New Process Turns Sewage Into Crude Oil

Big Hairy Ian shares this report from New Atlas: The U.S. Department of Energy’s Pacific Northwest National Laboratory has found a way to potentially produce 30 million barrels of biocrude oil per year from the 34 billion gallons of raw sewage that Americans create every day… [T]he raw sewage is placed in a reactor that’s basically a tube pressurized to 3, 000 pounds per square inch and heated to 660 degrees Fahrenheit, which mimics the same geological process that turned prehistoric organic matter into crude oil by breaking it down into simple compounds, only…it takes minutes instead of epochs… The end product is very similar to fossil crude oil with a bit of oxygen and water mixed in and can be refined like crude oil using conventional fractionating plants. After six years of development, they’ve licensed the process for a $6 million pilot plant that’s expected to launch in 2018. Read more of this story at Slashdot.

See the original article here:
A New Process Turns Sewage Into Crude Oil

More Than 50 Percent of All Pages In Chrome Are Loaded Over HTTPS Now

Reader Trailrunner7 writes: After years of encouraging site owners to transition to HTTPS by default, Google officials say that the effort has begun to pay off. The company’s data now shows that more than half of all pages loaded by Chrome on desktop platforms are served over HTTPS. Google has been among the louder advocates for the increased use of encryption across the web in the last few years. The company has made significant changes to its own infrastructure, encrypting the links between its data center, and also has made HTTPS the default connection option on many of its main services, including Gmail and search. And Google also has been encouraging owners of sites of all shapes and sizes to move to secure connections to protect their users from eavesdropping and data theft. That effort has begun to bear fruit in a big way. New data released by Google shows that at the end of October, 68 percent of pages loaded by the Chrome browser on Chrome OS machines were over HTTPS. That’s a significant increase in just the last 10 months. At the end of 2015, just 50 percent of pages loaded by Chrome on Chrome OS were HTTPS. The numbers for the other desktop operating systems are on the rise as well, with macOS at 60 percent, Linux at 54 percent, and Windows at 53 percent. Read more of this story at Slashdot.

More:
More Than 50 Percent of All Pages In Chrome Are Loaded Over HTTPS Now

Adobe Is Working On ‘Photoshop For Audio’ That Will Let You Add Words Someone Never Said

An anonymous reader quotes a report from The Verge: Adobe is working on a new piece of software that would act like a Photoshop for audio, according to Adobe developer Zeyu Jin, who spoke at the Adobe MAX conference in San Diego, California today. The software is codenamed Project VoCo, and it’s not clear at this time when it will materialize as a commercial product. The standout feature, however, is the ability to add words not originally found in the audio file. Like Photoshop, Project VoCo is designed to be a state-of-the-art audio editing application. Beyond your standard speech editing and noise cancellation features, Project VoCo can also apparently generate new words using a speaker’s recorded voice. Essentially, the software can understand the makeup of a person’s voice and replicate it, so long as there’s about 20 minutes of recorded speech. In Jin’s demo, the developer showcased how Project VoCo let him add a word to a sentence in a near-perfect replication of the speaker, according to Creative Bloq. So similar to how Photoshop ushered in a new era of editing and image creation, this tool could transform how audio engineers work with sound, polish clips, and clean up recordings and podcasts. “When recording voiceovers, dialog, and narration, people would often like to change or insert a word or a few words due to either a mistake they made or simply because they would like to change part of the narrative, ” reads an official Adobe statement. “We have developed a technology called Project VoCo in which you can simply type in the word or words that you would like to change or insert into the voiceover. The algorithm does the rest and makes it sound like the original speaker said those words.” Read more of this story at Slashdot.

More:
Adobe Is Working On ‘Photoshop For Audio’ That Will Let You Add Words Someone Never Said