Equifax CEO Richard Smith suddenly decides to ‘retire’

Equifax has been in the news lately for all the wrong reasons, following a chain of blunders and mismanagement after it revealed that a security breach leaked the personal data of 143 million people . This morning, the CEO of Equifax and chairman of its board, Richard Smith, retired effective immediately. In a release, Equifax stated that it has appointed Paulino do Rego Barros, Jr., as interim CEO. He’s been with the company for seven years and most recently was the president of Equifax’s Asia Pacific division. Smith will stay on as an unpaid advisor to oversee a smooth transition. He cites the reason for his departure as the data breach: “At this critical juncture, I believe it is in the best interests of the company to have new leadership to move the company forward, ” he said. Smith is the latest casualty of the epic breach (their Chief Security Officer and Chief Information Officer also “retired” ), which has been catastrophically mishandled by Equifax. The company’s failure to patch a well-known security hole is the reason hackers were able to gain access to the data. The company’s executives are also under DOJ investigation for suspiciously timed stock sales that occurred after Equifax realized the breach had occurred but before it disclosed information to the public. And their credit freeze pins had security issues of their own . It’s unclear whether new management will ease Equifax’s woes, after how mishandled this entire breach has been from the start. Senators have called for credit report changes , allowing for consumers to have more power over their information. It makes sense; credit agencies should be held accountable when they make terrible errors in judgment and don’t take action to protect the sensitive personal data they handle every day. Via: CNBC Source: Equifax

Read More:
Equifax CEO Richard Smith suddenly decides to ‘retire’

Nestle Makes Billions Bottling Water It Pays Nearly Nothing For

Nestle, the world’s largest food and beverage company, has been bottling water since 1843 and has grown into the largest seller of bottled water. But a detailed report on Bloomberg uncovers the company’s operation in Michigan, revealing that Nestle has come to dominate in the industry in part by going into economically depressed areas with lax water laws. It makes billions selling a product for which it pays close to nothing. Find the Bloomberg Businessweek article here (it might be paywalled, here’s an alternative source). Read more of this story at Slashdot.

View post:
Nestle Makes Billions Bottling Water It Pays Nearly Nothing For

Every Nintendo Switch appears to contain a hidden copy of NES Golf

On Saturday, the world may have gotten its first look at an NES game officially running on a Nintendo Switch. You might think the weird thing about this news is how long it has taken for Virtual Console support to come to the Switch. But this isn’t a Virtual Console story. Turns out, this is somehow weirder. Your Nintendo Switch may already have a fully playable NES game just sitting inside of it. Read 6 remaining paragraphs | Comments

View post:
Every Nintendo Switch appears to contain a hidden copy of NES Golf

Bitcoin Plummets Below $3,000 on Rising China Worries

Bitcoin dropped below $3, 000 on Friday as the cryptocurrency extended a brutal eight-day sell-off that has reduced its value against the dollar by a third. Financial Times reports: The currency traded as low as $2, 972, marking a 36 per cent fall from bitcoin’s close on September 7, and a collapse of 40 per cent from the highs struck earlier this month. The latest bout of selling came after BTCChina, one of the country’s biggest bitcoin exchanges, said it would halt trading at the end of the month. Focus has now shifted to the communist country’s other two big exchanges: OKCoin and Huobi. Alternative source. Read more of this story at Slashdot.

More:
Bitcoin Plummets Below $3,000 on Rising China Worries

Equifax Had ‘Admin’ as Login and Password in Argentina

Reader wired_parrot writes: The credit report provider Equifax has been accused of a fresh data security breach, this time affecting its Argentine operations. The breach was revealed after security researchers discovered that an online employee tool used by Equifax Argentina was accessible using the “admin/admin” password combination. Read more of this story at Slashdot.

See the original post:
Equifax Had ‘Admin’ as Login and Password in Argentina

Equifax Blames Open-Source Software For Its Record-Breaking Security Breach

The blame for the record-breaking cybersecurity breach that affects at least 143 million people falls on the open-source server framework, Apache Struts, according to an unsubstantiated report by equity research firm Baird. The firm’s source, per one report, is believed to be Equifax. ZDNet reports: Apache Struts is a popular open-source software programming Model-View-Controller (MVC) framework for Java. It is not, as some headlines have had it, a vendor software program. It’s also not proven that Struts was the source of the hole the hackers drove through. In fact, several headlines — some of which have since been retracted — all source a single quote by a non-technical analyst from an Equifax source. Not only is that troubling journalistically, it’s problematic from a technical point of view. In case you haven’t noticed, Equifax appears to be utterly and completely clueless about their own technology. Equifax’s own data breach detector isn’t just useless: it’s untrustworthy. Adding insult to injury, the credit agency’s advice and support site looks, at first glance, to be a bogus, phishing-type site: “equifaxsecurity2017.com.” That domain name screams fake. And what does it ask for if you go there? The last six figures of your social security number and last name. In other words, exactly the kind of information a hacker might ask for. Equifax’s technical expertise, it has been shown, is less than acceptable. Could the root cause of the hack be a Struts security hole? Two days before the Equifax breach was reported, ZDNet reported a new and significant Struts security problem. While many jumped on this as the security hole, Equifax admitted hackers had broken in between mid-May through July, long before the most recent Struts flaw was revealed. “It’s possible that the hackers found the hole on their own, but zero-day exploits aren’t that common, ” reports ZDNet. “It’s far more likely that — if the problem was indeed with Struts — it was with a separate but equally serious security problem in Struts, first patched in March.” The question then becomes: is it the fault of Struts developers or Equifax’s developers, system admins, and their management? “The people who ran the code with a known ‘total compromise of system integrity’ should get the blame, ” reports ZDNet. Read more of this story at Slashdot.

View post:
Equifax Blames Open-Source Software For Its Record-Breaking Security Breach

Nearly 3,000 Bitcoin Miners Exposed Online Via Telnet Ports, Without Passwords

An anonymous reader quotes a report from Bleeping Computer: Dutch security researcher Victor Gevers has discovered 2, 893 Bitcoin miners left exposed on the internet with no passwords on their Telnet port. Gevers told Bleeping Computer in a private conversation that all miners process Bitcoin transactions in the same mining pool and appear to belong to the same organization. “The owner of these devices is most likely a state sponsored/controlled organization part of the Chinese government, ” Gevers says, basing his claims on information found on the exposed miners and IP addresses assigned to each device. “At the speed they were taken offline, it means there must be serious money involved, ” Gevers added. “A few miners is not a big deal, but 2, 893 [miners] working in a pool can generate a pretty sum.” According to a Twitter user, the entire network of 2, 893 miners Gevers discovered could generate an income of just over $1 million per day, if mining Litecoin. Read more of this story at Slashdot.

View original post here:
Nearly 3,000 Bitcoin Miners Exposed Online Via Telnet Ports, Without Passwords

Studio Ghibli reopens for Hayao Miyazaki’s new film

Just a few years ago, Studio Ghibli’s future was in the air after co-founder and legendary animator Hayao Miyazaki (supposedly) retired. The place is about to be jumping again, however, as the studio announced that it has re-opened to start production on a recently-announced new film by the not-so-retired Miyazaki. He was on hand for a small ceremony on July 3rd, where he “brought together his main collaborators already engaged on his new feature film to talk to them about the project, ” the company said in a news release (translated). A re-opening normally wouldn’t be newsworthy, but at one point, it seemed like Studio Ghibli — behind masterpieces like Spirited Away , Princess Mononoke and Howl’s Moving Castle — would not produce any more films. Recently, however, Amazon announced that it would stream Ronja, the Robber’s Daughter , a children’s TV series directed by Miyazaki’s son Goro. Shortly after that came the news that the studio would produce a new film directed by Hayao Miyazaki. Studio Ghibli hasn’t released any details about the film itself, but many fans think it will be an adaptation of Miyazaki’s first CGI short film Boro the Caterpillar . That short was delayed, but producer Toshio Suzuki has said it will likely be released in 2019 ahead of the Tokyo 2020 Olympic games. Miyazaki has threatened retirement before, and when he stepped down in 2013, the company announced it would restructure for the next generation of animators. The films, while beloved by animation aficionados and cineastes, have never made tons of money — Studio Ghibli’s best-grossing film was Spirited Away, which made $275 million back in 2001. Over the years, however, the films have gained a much larger following thanks to streaming and DVD, so the new one will likely be met with unprecedented anticipation. Adding to that, Miyazaki will be 80 when it’s completed, so this could definitely be his last film. Via: Indie Wire Source: Buta Connection (Facebook)

Original post:
Studio Ghibli reopens for Hayao Miyazaki’s new film

CNET Pranked By Web Site’s Fake ‘All Out War’ Hack During DEFCON

In a piece describing the paranoid vibe in Las Vegas during the DEFCON convention, CNET reported Friday that the Wet Republic web site “had two images vandalized” with digital graffiti. But their reporter now writes that “my paranoia finally got the best of me, and it turned out to be an ad campaign.” The images included a scribbled beard and eye patch on a photo of bikini model, along with the handwritten message “It’s all out war.” CNET’s updated story now reports that “It looked like a prank you’d see from a mischievous hacker…” When I spotted the vandalism on the Wet Republic site Friday morning, it looked like other attacks I’d seen throughout the week, such as a Blue Screen of Death on a bus ticket machine… Hakkasan, which hosts the event at MGM Grand, said the “vandalism” was part of the cheeky advertisements for a seasonal bikini contest it’s been running since 2015. The “all-out war” is between the models in the competition, not between hackers and clubs. Hakkasan’s spokeswoman said nothing on its network has been compromised. So maybe not everything online in Las Vegas is getting hacked this week, and this n00b learned to calm down the hard way. For that matter, maybe that blue screen of death was also just another random Windows machine crashing. CNET’s reporter made one other change to his article. He removed the phrase “when hackers are in town for Defcon, everything seems to be fair game.” Read more of this story at Slashdot.

Visit link:
CNET Pranked By Web Site’s Fake ‘All Out War’ Hack During DEFCON

LibreOffice 5.4 Adds More New Features, Improves Office File Format Compatibility

The Document Foundation has released LibreOffice 5.4. Again, it’s on time, arriving six months after the release of LibreOffice 5.3. From a report: LibreOffice 5.4 is “the last major release of the LibreOffice 5.x family, ” and like other point releases is a major one, adding features across all components and incrementally improving compatibility with Microsoft Office document formats. Highlights include a new standard color palette based on the RYB (Red Yellow Blue) color model. File format compatibility improvements include better support for EMF vector images and higher quality rendering of imported PDF files (with support for embedding video in exported PDFs from Writer and Impress). Also added is OpenPGP key support for signing ODF documents in Linux. LibreOffice Writer adds new context menu items for working with sections, footnotes, endnotes and styles. Users can now import AutoText entries from Microsoft Word .dotm templates. The full structure of bulleted and numbered lists is now preserved when pasted as plain text, and users gain the ability to create custom watermarks for their documents via the Format menu. Read more of this story at Slashdot.

Continue reading here:
LibreOffice 5.4 Adds More New Features, Improves Office File Format Compatibility