Long TSA Delays Force Airports To Hire Private Security Contractors

An anonymous Slashdot reader writes: TSA checkpoints caused 6, 800 American Airlines passengers to miss their flights in just one week this spring, and the problem isn’t improving. “Two years ago the Transportation Security Administration (TSA) offered $15, 000 to anybody — literally anybody — who could come up with an idea to speed up airport security…” writes Popular Science. “They wouldn’t say who won or for which idea, but since we’re here two years later with longer wait times than ever, it’s fair to say it hasn’t lived up to the groundbreaking ideals of that call to action… Now in summer 2016, the TSA recommends arriving three hours early instead of a mere two.” So this spring the Seattle-Tacoma airport replaced many of the TSA staff with private screeners, although “Private security operates under strict direction from the TSA, and even those airports that heavily utilize private contractors still have a lot of TSA personnel in the back rooms…” according to the article. “The ability to do exactly what the TSA does, only faster and cheaper, seems to be the major draw.” Now 22 U.S. airports are using private screeners, although the Seattle and San Francisco airports are the only ones with significant traffic. The article also cites a Homeland Security report which discovered that investigators were able to smuggle a test bomb past security checkpoints in 67 out of 70 tests. Read more of this story at Slashdot.

More:
Long TSA Delays Force Airports To Hire Private Security Contractors

Penetration-Testing Distro Kali Linux 2016.2 Released

prisoninmate writes: What’s Kali Linux 2016.2? Well, it’s an updated Live ISO image of the popular GNU/Linux distribution designed for ethical hackers and security professionals who want to harden the security of their networks, which contains the latest software versions and enhancements for those who want to deploy the OS on new systems. It’s been quite some time since the last update to the official Kali Linux Live ISOs and new software releases are announced each day, which means that the packages included in the previous Kali Linux images are very old, and bugs and improvements are always implemented in the most recent versions of the respective security tools. Best of all, the new Kali Linux 2016.2 release comes in KDE, MATE, Xfce, LXDE, and Enlightenment E17 flavors. Their blog also points out that Kali recently appeared in an episode of Mr. Robot. Read more of this story at Slashdot.

Continue reading here:
Penetration-Testing Distro Kali Linux 2016.2 Released

NASA’s Impossible Propulsion EmDrive Is Heading to Space

An anonymous reader writes:The EmDrive, a hypothetical miracle propulsion system for outer space, has been sparking heated arguments for years. Now, Guido Fetta plans to settle the argument about reactionless space drives for once and for all by sending one into space to prove that it really generates thrust without exhaust. Even if mainstream scientists say this is impossible. Fetta is CEO of Cannae Inc, and inventor of the Cannae Drive. His creation is related to the EmDrive first demonstrated by British engineer Roger Shawyer in 2003. Both are closed systems filled with microwaves with no exhaust, yet which the inventors claim do produce thrust. There is no accepted theory of how this might work. Shawyer claims that relativistic effects produce different radiation pressures at the two ends of the drive, leading to a net force. Fetta pursues a similar idea involving Lorentz (electromagnetic) forces. NASA researchers have suggested that the drive is actually pushing against “quantum vacuum virtual plasma” of particles that shift in and out of existence. Most physicists believe these far-out systems cannot work and that their potential benefits, such as getting to Mars in ten weeks, are illusory. After all, the law of conservation of momentum says that a rocket cannot accelerate forward without some form of exhaust ejected backwards. Yet the drumbeat goes on. Just last month, Jose Rodal claimed on the NASA Spaceflight forum that a NASA paper, “Measurement of Impulsive Thrust from a Closed Radio Frequency Cavity in Vacuum” has finally been peer-reviewed and accepted for publication by the American Institute of Aeronautics and Astronautics, but this cannot be confirmed yet. Read more of this story at Slashdot.

Read the original:
NASA’s Impossible Propulsion EmDrive Is Heading to Space

Walmart Is Cutting 7,000 Jobs Due To Automation

An anonymous reader quotes a report from Yahoo: The clairvoyant folks over at the World Economic Forum warned of a “Fourth Industrial Revolution” involving the rise of the machine in the workforce, and the latest company to lend credence to that claim is none other than Walmart, which is planning on cutting 7, 000 jobs on account of automation. But the Walmart decision may be a bit more alarming for those in the workforce. As the Wall Street Journal reports (Warning: may be paywalled), the most concerning aspect of America’s largest private employer might be that the eliminated positions are largely in the accounting and invoicing sectors of the company. These jobs are typically held by some of the longest tenured employees, who also happen to take home higher hourly wages. Now, those coveted positions are being automated. The Journal reports that beginning in 2017, much of this work will be addressed by “a central office or new money-counting ‘cash recycler’ machines in stores.” Earlier this year, the company tested this change across some 500 locations. “We’ve seen many make smooth transitions during the pilot, ” said Deisha Barnett, a Walmart spokeswoman. Read more of this story at Slashdot.

Read more here:
Walmart Is Cutting 7,000 Jobs Due To Automation

Falcon 9 Explodes On Pad

Reader Mysticalfruit writes: NPR is reporting that a Falcon9 carrying the AMOS-6 satellite that was supposed to launch on Sat exploded during it’s scheduled static fire. No injuries are reported. They’re reporting that this was going to be the first reflown first stage. The Verge adds:SpaceX’s Falcon 9 rocket, meant to launch a satellite this weekend, exploded on the launch pad at Cape Canaveral, Florida this morning. The explosion occurred during the preparation for the static fire test of the rocket’s engines, NASA told the Associated Press. The blast reportedly shook buildings “several miles away.” The company confirmed to The Verge the loss of the Falcon 9 an hour later: “SpaceX can confirm that in preparation for today’s static fire, there was an anomaly on the pad resulting in the loss of the vehicle and its payload. Per standard procedure, the pad was clear and there were no injuries.” Read more of this story at Slashdot.

See the article here:
Falcon 9 Explodes On Pad

Staff Breach At OneLogin Exposes Password Storage Feature

River Tam quotes a report from CSO Australia: Enterprise access management firm OneLogin has suffered an embarrassing breach tied to a single employee’s credentials being compromised. OneLogin on Tuesday revealed the breach affected a feature called Secure Notes that allowed its users to “store information.” That feature however is pitched to users as a secure way to digitally jot down credentials for access to corporate firewalls and keys to software product licenses. The firm is concerned Secure Notes was exposed to a hacker for at least one month, though it may have been from as early as July 2 through to August 25, according to a post by the firm. Normally these notes should have been encrypted using “multiple levels of AES-256 encryption, ” it said in a blog post. Several thousand enterprise customers, including high profile tech startups, use OneLogin for single sign-on to access enterprise cloud applications. The company has championed the SAML standard for single sign-on and promises customers an easy way to enable multi-factor authentication from devices to cloud applications. But it appears the company wasn’t using multi-factor authentication for its own systems. OneLogin’s CISO Alvaro Hoyos said a bug in its software caused Secure Notes to be “visible in our logging system prior to being encrypted and stored in our database.” The firm later found out that an employees compromised credentials were used to access this logging system. The company has since fixed the bug on the same day it detected the bug. CSO adds that the firm “also implemented SAML-based authentication for its log management system and restricted access to a limited set of IP addresses.” Read more of this story at Slashdot.

Excerpt from:
Staff Breach At OneLogin Exposes Password Storage Feature

European Commission To Issue Apple An Irish Tax Bill of $1.1 Billion, Says Report

An anonymous reader quotes a report from Reuters: The European Commission will rule against Ireland’s tax dealings with Apple on Tuesday, two source familiar with the decision told Reuters, one of whom said Dublin would be told to recoup over 1 billion euros in back taxes. The European Commission accused Ireland in 2014 of dodging international tax rules by letting Apple shelter profits worth tens of billions of dollars from tax collectors in return for maintaining jobs. Apple and Ireland rejected the accusation; both have said they will appeal any adverse ruling. The source said the Commission will recommend a figure in back taxes that it expects to be collected, but it will be up to Irish authorities to calculate exactly what is owed. A bill in excess of 1 billion euros ($1.12 billion) would be far more than the 30 million euros each the European Commission previously ordered Dutch authorities to recover from U.S. coffee chain Starbucks and Luxembourg from Fiat Chrysler for their tax deals. When it opened the Apple investigation in 2014, the Commission told the Irish government that tax rulings it agreed in 1991 and 2007 with the iPhone maker amounted to state aid and might have broken EU laws. The Commission said the rulings were “reverse engineered” to ensure that Apple had a minimal Irish bill and that minutes of meetings between Apple representatives and Irish tax officials showed the company’s tax treatment had been “motivated by employment considerations.” Read more of this story at Slashdot.

View original post here:
European Commission To Issue Apple An Irish Tax Bill of $1.1 Billion, Says Report

US Appeals Court Dismisses AT&T Data Throttling Lawsuit

An anonymous reader quotes a report from Reuters: A federal appeals court in California on Monday dismissed a U.S. government lawsuit that accused ATT Inc of deception for reducing internet speeds for customers with unlimited mobile data plans once their use exceeded certain levels. The company, however, could still face a fine from the Federal Communications Commission regarding the slowdowns, also called “data throttling.” The U.S. Court of Appeals for the Ninth Circuit said it ordered a lower court to dismiss the data-throttling lawsuit, which was filed in 2014 by the Federal Trade Commission. The FTC sued ATT on the grounds that the No. 2 U.S. wireless carrier failed to inform consumers it would slow the speeds of heavy data users on unlimited plans. In some cases, data speeds were slowed by nearly 90 percent, the lawsuit said. The FTC said the practice was deceptive and, as a result, barred under the Federal Trade Commission Act. ATT argued that there was an exception for common carriers, and the appeals court agreed. Read more of this story at Slashdot.

See more here:
US Appeals Court Dismisses AT&T Data Throttling Lawsuit

New Ransomware Poses As A Windows Update

Slashdot reader MojoKid quotes an article from Hot Hardware: A security researcher for AVG has discovered a new piece of ransomware called Fantom that masquerades as a critical Windows update. Victims who fall for the ruse will see a Windows screen acting like it’s installing the update, but what’s really happening is that the user’s documents and files are being encrypted in the background… The scam starts with a pop-up labeled as a critical update from Microsoft. Once a user decides to apply the fake update, it extracts files and executes an embedded program called WindowsUpdate.exe… As with other EDA2 ransomware, Fantom generates a random AES-128 key, encrypts it using RSA, and then uploads it to the culprit. From there, Fantom targets specific file extensions and encrypts those files using AES-128 encryption… Users affected by this are instructed to email the culprit for payment instructions. While the ransomware is busy encrypting your files, it displays Microsoft’s standard warning about not turning off the computer while the “update” is in progress. Pressing Ctrl+F4 closes that window, according to the article, “but that doesn’t stop the ransomware from encrypting files in the background.” Read more of this story at Slashdot.

Read More:
New Ransomware Poses As A Windows Update

20% of Scientific Papers On Genes Contain Conversion Errors Caused By Excel, Says Report

An anonymous reader writes from a report via WinBeta: A new report from scientists Mark Ziemann, Yotam Eren, and Assam El-Osta says that 20% of scientific papers on genes contain gene name conversion errors caused by Excel. In the scientific article, titled “Gene name errors are widespread in the scientific literature, ” article’s abstract section, the scientists explain: “The spreadsheet software Microsoft Excel, when used with default settings, is known to convert gene names to dates and floating-point numbers. A programmatic scan of leading genomics journals reveals that approximately one-fifth of papers with supplementary Excel gene lists contain erroneous gene name conversions.” It’s easy to see why Excel might have problems with certain gene names when you see the “gene symbols” that the scientists use as examples: “For example, gene symbols such as SEPT2 (Septin 2) and MARCH1 [Membrane-Associated Ring Finger (C3HC4) 1, E3 Ubiquitin Protein Ligase] are converted by default to ‘2-Sep’ and ‘1-Mar’, respectively. Furthermore, RIKEN identifiers were described to be automatically converted to floating point numbers (i.e. from accession ‘2310009E13’ to ‘2.31E+13’). Since that report, we have uncovered further instances where gene symbols were converted to dates in supplementary data of recently published papers (e.g. ‘SEPT2’ converted to ‘2006/09/02’). This suggests that gene name errors continue to be a problem in supplementary files accompanying articles. Inadvertent gene symbol conversion is problematic because these supplementary files are an important resource in the genomics community that are frequently reused. Our aim here is to raise awareness of the problem.” You can view the scientific paper in its entirety here. Read more of this story at Slashdot.

Read More:
20% of Scientific Papers On Genes Contain Conversion Errors Caused By Excel, Says Report