Uber data breach compromises IDs of 50,000 drivers

An Uber database containing the names and driver’s license numbers of 50, 000 current and former drivers was accessed by an outside party in 2014, the company announced today. Uber discovered the breach on September 17, 2014, and an investigation revealed one instance of unauthorized access on May 13, 2014. This means the information has been in the wild for nearly a year, though Uber drivers haven’t reported anything fishy and the database is now secure, the company said. Uber began notifying affected drivers of the breach today and is offering a free year membership with an identity protection company. Of the 50, 000 compromised names, 21, 000 were based in California, prompting Uber to also notify the California attorney general, the LA Times says. Additionally, the company has filed a “John Doe” lawsuit in an effort to gather more information about the third party. “Uber takes seriously our responsibility to safeguard personal information, and we are sorry for any inconvenience this incident may cause, ” Uber said. The data breach comes one month after Uber’s security protocols received a clean bill of health as part of an external privacy audit, though that was spurred by high-profile missteps with information about Uber’s passengers, not its drivers. In that report, the investigating agency recommended Uber start training its workforce in security issues and it further restrict access to data among employees. “At Uber, protecting the personal information of riders is a core responsibility and company value, ” CEO Travis Kalanick said at the time. “Delivering on that value means that privacy is woven into every facet of our business, from the design of new products to how we interact with riders, drivers and the public at large.” Filed under: Software , HD Comments Source: Uber

Read More:
Uber data breach compromises IDs of 50,000 drivers

Walmart vs. Netflix DVD battle snags $12 each for 1.2 million people

Ready for a blast from the past? Ten years ago, Walmart’s plan to undercut Netflix on DVD-by-mail rental pricing failed, and the retail giant turned that part of its business over to the movie service in exchange for a cut of the revenue, referral bonuses and Netflix promoting Walmart’s DVD sales to rental customers . A class action lawsuit against the two followed in 2009, with customers alleging they illegally restrained trade and kept prices high. Walmart settled the case for $27 million in 2011, which will turn into about $12 (paid out in gift cards or cash) for the 1.2 million people who filed claims . While the deadline to file has long passed, the payout has been held up due to appeals in the 9th Circuit Court in San Francisco against Walmart and Netflix — until now. This week judges ruled on a few items ( PDF , via Courthouse News Service ), including that the settlement was fair — that the nine named plaintiffs get $5, 000 each and a large portion went to lawyer’s fees upset a few class action members . At the time even Netflix had objections , worrying that Walmart was simply buying access to its customer list. Another factor in the ruling is that Netflix never considered Walmart a true competitor (it actually raised prices at the time , and didn’t lower them for competition, even from the much larger Blockbuster) the original ruling was correct, and subscribers could not prove they were injured by the tie-up. It’s not all good news for Netflix though, as the appeals court trimmed the $710k it was awarded for attorney fees, and turned down its request for $21, 000 to cover B&W Powerpoint documents. Of course, soon a million or so people will probably be making it rain drizzle with their $12 payouts, Netflix is now primarily a streaming company with over 57 million customers that just delivered season three of House of Cards , and Walmart, well Walmart has the Vudu Spark dongle. All’s well that ends well. [Image credit: Associated Press] Filed under: Home Entertainment , HD Comments Source: Online DVD Class , Courthouse News Service , The Hollywood Reporter

Continue reading here:
Walmart vs. Netflix DVD battle snags $12 each for 1.2 million people

Harrison Ford will return in ‘Blade Runner’ sequel

Need more good news after today’s net neutrality ruling? Deadline and Variety report it has been confirmed that Harrison Ford will return to the role of Rick Deckard in the Blade Runner sequel that’s currently in the works. Ridley Scott is producing the film, Hampton Fancher (co-writer of the original movie) and Michael Green are writing, and Denis Villeneuve ( Prisoners ) is in negotiations to direct.The movie is supposed to start shooting next summer, giving Ford plenty of time to recover from any Star Wars-related injuries and us an opportunity to check out Amazon’s upcoming (and also based on a Philip K. Dick story) The Man in the High Castle series. Developing… [Image credit: Getty Images] Filed under: Misc , Home Entertainment , HD Comments Source: Deadline , Variety , The Hollywood Reporter

Original post:
Harrison Ford will return in ‘Blade Runner’ sequel

WSJ: YouTube isn’t making money, even with a billion viewers

Despite “Gangnam Style” having over two billion views , hosting countless other viral clips and netting over a billion users per-month, YouTube can’t seem to turn a profit. How’s that? Well, after paying for the infrastructure that makes Google’s video empire possible (and its content partners), The Wall Street Journal says that YouTube didn’t contribute to Mountain View’s earnings. The culprit, apparently, is that most users arrive at videos via links, rather than daily visits to the YouTube homepage where Google could charge a premium for ads. WSJ also reports that the site’s reach isn’t very wide either, with one source’s estimate that nine percent of viewers account for a whopping 85 percent of online-video views. That makes it a much less appealing audience for advertisers than traditional TV programming, despite the outfit’s increasing investment in original content . Google’s hoping that things the Music Key subscription service can hold the tide of red ink back and turn that sea black. Another method is with targeted ads, so you can get inundated with sales pitches for stuff you’ve recently browsed on Amazon. WSJ ‘s sources say that those might be a bit harder to add than Google previously expected, though, and thankfully could take some time to roll out. At least there’s some form of silver lining here. Filed under: Home Entertainment , Internet , HD , Google Comments Source: The Wall Street Journal

See the article here:
WSJ: YouTube isn’t making money, even with a billion viewers

Facebook rolls out new tools to help prevent suicides

With over a billion users, Facebook plays an important role in keeping people connected. It serves as a place to share good news, but also provides a platform for users to request support from their digital peers. The company is keenly aware that it can assist users when there is a cry for help, which is why it rolled out an (lengthy) way to flag suicidal content back in 2011 . Now, it’s taking that one step further by introducing new tools to boost its suicide prevention efforts. From this week, Facebook will begin rolling out a new option inside each post that lets users flag when a friend may be considering self harm. The concerned party can click on the little arrow at the top right of a status and click “Report Post.” When that person logs in next, Facebook will then offer options to contact the person concerned about them, enlist the help of another friend or put them in contact with a suicide helpline. The social network has teamed up with mental health organizations Forefront, Now Matters Now, the National Suicide Prevention Lifeline and Save.org to make it easier for users to show their concern. The feature will be available initially to those in the US and Facebook says it will complete the rollout within the next couple of months. It’s also vowed to improve its tools for users in other parts of the world. Filed under: Internet , Facebook Comments Via: Time Source: Facebook

See more here:
Facebook rolls out new tools to help prevent suicides

Apple ordered to pay $532.9 million to an iTunes patent troll

Despite attempts to curb patent trolls , at least some of them are getting lucky — and this week, one got very lucky. A Texas court has ordered Apple to pay a whopping $532.9 million to Smartflash, a holding company which sued over claims that iTunes (specifically its copy protection, payment systems and storage) violates its patents. The Cupertino crew allegedly abused the inventions on purpose, in part because one of its execs was briefed on them over a decade ago. Apple is appealing the ruling, and points out that Smartflash hasn’t exactly been above-board in its behavior. It exists solely to extract patent royalties, and waited years to take action — it even set up its only office across from the courthouse holding the trial, making it clear that lawsuits were expected from the start. It’s hard to tell whether or not the appeal will succeed in reducing the payout (Apple wanted to limit damages to $4.5 million) or overturning the verdict. However, Apple isn’t the only target in the crosshairs. Smartflash has also sued Google and Samsung, so it could cause a lot of grief for the tech industry as a whole. [Image credit: Adam Berry/Getty Images for Apple] Filed under: Software , Apple , Samsung , Google Comments Via: MacRumors Source: Bloomberg

More:
Apple ordered to pay $532.9 million to an iTunes patent troll

Google Play Music now lets you store 50,000 songs in the cloud

Even if you’re not paying for All Access or YouTube Music Key , Google Play can be a useful way to stream your personal music collection. With its free “locker” service, you can store thousands of tunes online and stream them from the web, as well as your favorite Android and iOS devices. By keeping them in the cloud, they’re quickly accessible across a range of hardware and won’t clog up your precious onboard storage. Until now Google has set a limit of 20, 000 tracks per user, but today it’s raising that amount to 50, 000. It’s a significant increase, and one that might appeal if you have a mammoth music library full of EPs, remixes and B-sides that aren’t available from the major streaming services. Filed under: Software , Google Comments

Taken from:
Google Play Music now lets you store 50,000 songs in the cloud

Microsoft gives eligible students free Office 365 subscriptions

Turns out Microsoft had a surprise in store for students around the globe this February, and not just for those based in New York . The company’s finally bringing free Office 365 subscriptions to students outside the US, so long as they live in one of the countries (it’s quite a lengthy list ) where the product’s available. Schools will have to buy subscriptions for staff and faculty, but once they do, students (and even teachers) can self-install for no charge by using a school-issued email address at the Office in education website . After signing up, they’ll get access to the newest Office, Excel, PowerPoint, OneNote, Access and Publisher, and be able to install them on up to five computers and five phones or tablets. An account also comes with Office Online and, even better, 1TB of OneDrive storage, so users can go wild uploading anything without quickly running out of space. [Image credit: Shutterstock / Andresr] Filed under: Misc , Microsoft Comments Via: PC World Source: Microsoft , Office in Education

Original post:
Microsoft gives eligible students free Office 365 subscriptions

What you need to know about HTTP/2

Look at the address bar in your browser. See those letters at the front, “HTTP”? That stands for Hypertext Transfer Protocol, the mechanism a browser uses to request information from a server and display webpages on your screen. A new version of the reliable and ubiquitous HTTP protocol was recently published as a draft by the organization in charge of creating standards for the internet, the Internet Engineering Task Force (IETF). This means that the old version, HTTP/1.1, in use since 1999, will eventually be replaced by a new one, dubbed HTTP/2. This update improves the way browsers and servers communicate, allowing for faster transfer of information while reducing the amount of raw horsepower needed. Why is this important? HTTP/1.1 has been in use since 1999, and while it’s performed admirably over the years, it’s starting to show its age. Websites nowadays include many different components besides your standard HTML, like design elements (CSS), client-side scripting (JavaScript), images, video and Flash animations. To transfer that information, the browser has to create several connections, and each one has details about the source, destination and contents of the communication package or protocol. That puts a huge load on both the server delivering the content and your browser. All those connections and the processing power they require can lead to slowdowns as more and more elements are added to a site. And if we know nothing else, it’s that people can be quite impatient. We’ve come to expect blazing-fast internet and even the slightest of delays can lead to hair pulling and mumbled swears. For companies, a slow website can translate directly into lost money, especially for online services where long load times mean a bad user experience. People have been searching for ways to speed up the internet since the days when dial-up and AIM were ubiquitous. One of the more common techniques is caching, where certain information is stored locally as opposed to transferring everything anew each time it’s requested. But others have resorted to tricks like lowering the resolution of images and videos; still others have spent countless hours tweaking and optimizing code to cut just milliseconds from their load times. These options are useful, but are really just Band-Aids. So Google decided to dramatically overhaul HTTP/1.1 and create SPDY; the results have been impressive. In general, communication between a server and a browser using SPDY is much faster, even when encryption is applied. At a minimum, the transfer speed with SPDY can improve by about 10 percent and, in some cases, can reach numbers closer to 40 percent. Such has been the success of SPDY that in 2012 the group of Google engineers behind the project decided to create a new protocol based on the technology, and that started the story that leads us to the current HTTP/2 draft. What is a protocol? You can think of a protocol as a collection of rules that govern how information is transferred from one computer to another. Each protocol is a little different, but usually they include a header, payload and footer. The header contains the source and destination addresses and some information about the payload (type of data, size of data, etc.). The payload contains the actual information, and the footer holds some form of error detection. Some protocols also support a feature called “encapsulation, ” which lets them include other protocols inside of their payload section. You can think of it like sending a letter using snail mail. Our protocol in this case would be defined by the USPS. The letter would require a destination address in a specific format, a return address and postage. The “payload” would be the letter itself and the error detection is the seal on the envelope. If it arrives ripped and without a letter, you’d know there was a problem. Why is HTTP/2 better? In a few words: HTTP/2 loads webpages much faster, saving everyone time that otherwise would go to waste. It’s as simple as that. The example below, published by the folks over at HttpWatch , shows transfer speeds increasing more than 20 percent, and this is just one test with web servers not yet fully optimized (the technology will need some time to mature for that). In fact, improvements of around 30 percent seem to be common. Example of HTTP page load speed (above) against HTTP/2 (below) HTTP/2 improves speed mainly by creating one constant connection between the browser and the server, as opposed to a connection every time a piece of information is needed. This significantly reduces the amount of data being transferred. Plus, it transfers data in binary, a computer’s native language, rather than in text. This means your computer doesn’t have to waste time translating information into a format it understands. Other features of HTTP/2 include “multiplexing” (sending and receiving multiple messages at the same time), the use of prioritization (more important data is transferred first), compression (squeezing information into smaller chunks) and “server push, ” where a server makes an educated guess about what your next request will be and sends that data ahead of time. So when will we get to enjoy the benefits of HTTP/2? There’s no real start date for the use of HTTP/2, and many people may already be using it unknowingly. The draft submitted on February 11th will expire in six months (August 15th, to be precise). Before expiring, it has to be confirmed and become a finished document, called an “RFC, ” or a new draft with changes has to be published. As a side note, we should mention that the term “RFC” comes from “Request For Comments, ” but it’s really a name for a finalized document used by the IETF. Also, an RFC is not a requirement, but more of a suggestion of how things should be designed. (Confusing right?) However, for a protocol to work properly, everyone has to follow the same rules. The HTTP/2 technology is already baked into many web servers and browsers, even if it’s still just a draft. For example, Microsoft supports HTTP/2 on Internet Explorer under the Windows 10 Technical Preview ; Chrome also supports it (while it’s disabled by default, you can easily enable it ); and Mozilla has had it available since Firefox Beta 36. If we talk about web servers, you should know that IIS (the Windows web server) already supports HTTP/2 under Windows 10 and it’s expected that Apache and Nginx will offer support very soon (SPDY is already supported through extensions). This means that sooner, rather than later, we will all be using HTTP/2. And chances are you won’t even realize it when the switch is made unless you’re in the habit of timing load times for your favorite sites. Plus, you’ll still just see “http” or “https” in the address bar, so, life will continue as usual, but a bit faster. [Image credits: Shutterstock (Server rack); HttpWatch (Benchmark charts)] Comments Source: IETF

See original article:
What you need to know about HTTP/2

Electron microscopes stop thieves from covering their tracks

Ask the police and they’ll tell you that serial numbers seldom help catch thieves — dedicated crooks are usually smart enough to file off those digits so that stolen items can’t be linked to a crime. Researchers at the National Institute of Standards and Technology might have just found a way to recover those numbers and stop criminals in their tracks, however. Their new technique uses electron microscopes to spot damaged crystal patterns in steel, revealing characters even when they’ve been polished into oblivion. Current recovery approaches (like acid etching or electrolytic polishing) only sometimes work, and frequently provide faint clues at best — the microscope produces clear evidence that you could use to convict someone in court. It’s going to be a while before the cops are using this method. Right now, it takes three whole days to identify eight numbers. That time could shrink to an hour through optimization, though. If that happens, gun runners and burglars may have a considerably harder time escaping the long arm of the law. Unless nogoodniks get particularly creative, you’d have little trouble tracing many weapons and fenced items back to their sources. [Image credit: White/NIST] Filed under: Science Comments Via: Slashdot , Gizmodo Source: NIST

Read this article:
Electron microscopes stop thieves from covering their tracks