Yahoo’s 2013 hack impacted all 3 billion accounts

Last year Yahoo (now part of Oath along with AOL after its acquisition by Verizon) announced that back in 2013, hackers had stolen info covering over one billion of its accounts . Today, the combined company announced that further investigation reveals the 2013 hack affected all of its accounts that existed at the time — about three billion. The information taken “may have included names, email addresses, telephone numbers, dates of birth, hashed passwords (using MD5) and, in some cases, encrypted or unencrypted security questions and answers.” For users being notified of the hack now, the notification is that their information is included. At the time the breach was first announced, Yahoo required everyone who had not reset their passwords since the breach to do so. According to the FAQ posted, it doesn’t appear there’s any new action being taken. The announcement isn’t very specific about why or how it determined the breach was so much larger — or how it was missed in the original forensic analysis, or how this happened in the first place — likely due to pending lawsuits over the issue. Subsequent to Yahoo’s acquisition by Verizon, and during integration, the company recently obtained new intelligence and now believes, following an investigation with the assistance of outside forensic experts, that all Yahoo user accounts were affected by the August 2013 theft. While this is not a new security issue, Yahoo is sending email notifications to the additional affected user accounts. The investigation indicates that the user account information that was stolen did not include passwords in clear text, payment card data, or bank account information. The company is continuing to work closely with law enforcement. Source: Oath , Yahoo FAQ

See the original article here:
Yahoo’s 2013 hack impacted all 3 billion accounts

Apache bug leaks contents of server memory for all to see—Patch now

(credit: Hanno Böck ) There’s a bug in the widely used Apache Web Server that causes servers to leak pieces of arbitrary memory in a way that could expose passwords or other secrets, a freelance journalist has disclosed . The vulnerability can be triggered by querying a server with what’s known as an OPTIONS request. Like the better-known GET and POST requests, OPTIONS is a type of HTTP method that allows users to determine which HTTP requests are supported by the server. Normally, a server will respond with GET, POST, OPTIONS, and any other supported methods. Under certain conditions, however, responses from Apache Web Server include the data stored in computer memory. Patches are available here and here . The best-known vulnerability to leak potentially serious server memory was the Heartbleed bug located in the widely used OpenSSL cryptography library . Within hours of Heartbleed’s disclosure in April 2014, attackers were exploiting it to obtain passwords belonging to users of Yahoo, Ars , and other sites. Heartbleed could also be exploited to bleed websites’ private encryption keys and to hack networks with multifactor authentication . Read 3 remaining paragraphs | Comments

Read the original post:
Apache bug leaks contents of server memory for all to see—Patch now

“Bing is bigger than you think,” Microsoft boasts, at 33% of US searches

Bing is bigger than you think! #SEM #PPC #bingadswebcast pic.twitter.com/fFtEDvM634 — Bing Ads (@BingAds) August 17, 2017 We’ve known from Microsoft’s financial reports that Bing has been growing. The search engine became profitable in the third calendar quarter of 2015, and Microsoft says it has continued to grow both the market share and revenue-per-search since then. But how big is Bing? Via OnMSFT , Microsoft tweeted yesterday that it’s “bigger than you think” and provided some numbers that will probably be a surprise to many. The company claims that fully one-third of searches in the US are powered by Bing, either directly or through Yahoo or AOL (both of which provide results generated by Microsoft). Other strong markets include Taiwan, at 24 or 26 percent, and the UK, at either 23 or 25 percent (depending on which tweet you read). Globally, the company is claiming a 9-percent market share. Google is still the runaway winner, of course, but Microsoft’s numbers (using data from comScore) suggest that in at least some parts of the world, Bing is big enough to take note of. The real target for this kind of data is, of course, advertisers; by showing that Bing is actually being used by large numbers of people, Microsoft hopes that it will become more appealing to those wanting to advertise alongside search results. Read 2 remaining paragraphs | Comments

Taken from:
“Bing is bigger than you think,” Microsoft boasts, at 33% of US searches

Cook Says Apple Is Focusing on Making an Autonomous Car System

An anonymous reader shares a Bloomberg report: After years toiling away in secret on its car project, Apple Chief Executive Officer Tim Cook has for the first time laid out exactly what the company is up to in the automotive market: It’s concentrating on self-driving technology. “We’re focusing on autonomous systems, ” Cook said in an interview on Bloomberg Television. “It’s a core technology that we view as very important. We sort of see it as the mother of all AI projects, ” Cook said in his most detailed comments to date on Apple’s plans in the car space. “It’s probably one of the most difficult A.I. projects actually to work on.” “There is a major disruption looming there, ” Cook said on Bloomberg Television, citing self-driving technology, electric vehicles and ride-hailing. “You’ve got kind of three vectors of change happening generally in the same time frame.” Cook was also bullish about the prospects for electric vehicles, a market which last week helped Tesla become the world’s fourth-biggest carmaker by market capitalization, even as it ranks well outside the top 10 by unit sales.”It’s a marvelous experience not to stop at the filling station or the gas station, ” Cook said. Read more of this story at Slashdot.

Visit site:
Cook Says Apple Is Focusing on Making an Autonomous Car System

Airbnb Announces Its Plan To House 100,000 People In Need

New submitter mirandakatz writes: Airbnb has just unveiled its Open Homes Platform, a home-sharing site for hosts motivated by goodwill instead of profits — and for guests motivated by need rather than wanderlust. Specifically, Airbnb is going to begin by connecting refugees with hosts in Canada, France, Greece, and the United States. Ultimately, refugees will be just one group that the site aims to help: Site visitors can also nominate other groups of people for temporary placements, and the platform will expand to include them eventually. At Backchannel, Jessi Hempel dives into the home-sharing platform’s latest effort, and places it in the context of the company’s broader business strategy. Read more of this story at Slashdot.

Originally posted here:
Airbnb Announces Its Plan To House 100,000 People In Need

Verizon Expected To Cut Up To 1,000 Yahoo, AOL Jobs After Acquisition

Verizon’s acquisition and merger of AOL and Yahoo will result in many job cuts. According to Recode, up to 1, 000 AOL and Yahoo jobs are expected to take place across the two companies as the merger is completed. From the report: This action is not unexpected, given that both companies have a lot of redundancies, including in human resources, finance, marketing and general administration. The merger between the two companies — after Verizon bought both in succession to add tech and content to its mobile services — is expected to be completed in the next week. The shareholder meeting to approve the deal takes place tomorrow. Plans to combine both companies have been in the works for a while, as the pair attempt to make a cohesive unit out of two entities that have multiple assets and also multiple problems. It will be headed by AOL CEO Tim Armstrong, who will become the CEO of Oath, the new name for the Verizon subsidiary. Read more of this story at Slashdot.

See the article here:
Verizon Expected To Cut Up To 1,000 Yahoo, AOL Jobs After Acquisition

Yahoo misused millions meant for humanitarian aid, lawsuit claims

Yahoo executives allowed the head of the company’s Human Rights Trust to use $13 million — the bulk of the organization’s funding — for personal gain, according to a federal lawsuit filed today in DC. These allegations aren’t new and the trust itself was dissolved in 2015 after years of suspicious activity, but today’s lawsuit puts Yahoo on the hook for $17.3 million, at least. The Yahoo Human Rights Trust entered and exited this world under unfortunate circumstances. Yahoo established it in 2007 as part of a settlement with Chinese dissidents who were imprisoned in part because Yahoo cooperated with the Chinese government. The company had revealed the identities of Yahoo email users who were sharing messages Chinese authorities objected to, leading to their arrest and years of detainment, in some cases. In the fall of 2007, Yahoo paid each affected family $3.2 million, CEO Jerry Yang was reprimanded by Congress live on television, and the company established the Yahoo Human Rights Trust , a $17.3 million fund meant to aid victims of Chinese rights abuses. It elected Harry Wu, a former political activist who spent 19 years in Chinese labor camps, to lead the effort. Today’s lawsuit was brought by eight plaintiffs who had been imprisoned in China for using the internet to express dissident opinions or share information the government found objectionable, making them “past and future potential beneficiaries” of the Yahoo Human Rights Trust. They claimed Wu misused $13 million of the fund’s $17.3 million, while Yahoo executives turned a blind eye to his actions. The lawsuit said Wu, who died in 2016, used the Human Rights Trust as a piggy bank, directly paying himself and his wife more than $1 million between 2007 to 2015. It also claimed he spent $4 million on a museum about Chinese prison camps and other real estate for his own non-profit, the Laogai Research Foundation. Plus, the plaintiffs alleged Wu used trust money for a series of personal lawsuits, some of which accused him of mismanaging federal grants and sexual harassment. Just $700, 000 of the fund’s $17.3 million was used to directly aid imprisoned dissidents, according to the suit. Plaintiffs claimed Yahoo executives were aware of Wu’s mismanagement and did nothing, even after they received letters from Laogai Research Foundation employees and others concerned that the trust was being misused. “He will harm the organization and damage the image of Yahoo, ” Wu’s assistant wrote to executives in 2010. “Scandals will be exposed and it would be a heavy blow to the human rights issue in China.” Meanwhile, Yahoo continued to point to the trust as an example of its commitment to supporting freedom of expression and human rights, according to the suit. As suspicions about the trust’s finances grew, Yahoo dissolved it in 2015. The plaintiffs in today’s case want Yahoo to replenish the full $17.3 million trust and change its wording so it can benefit only Chinese dissidents, and they’re asking for all money unlawfully spent by Wu to be returned. Yahoo — which was recently bought by Verizon , endured a handful of scandals and was absorbed into Oath — declined to comment on this story, citing pending litigation.

Read the original:
Yahoo misused millions meant for humanitarian aid, lawsuit claims

‘We Didn’t Lose Control Of Our Personal Data — It Was Stolen From Us By People Farmers’

Sir Tim Berners-Lee, the inventor of the worldwide web, wrote an open-letter over the weekend to mark the 28th anniversary of his invention. In his letter, he shared three worrisome things that happened over the last twelve months. In his letter, Berners-Lee pointed out three things that occurred over the past 12 months that has him worried: we do not assume control of our personal data anymore; how easy it is for misinformation to spread on the web; and lack of transparency on political advertising on the web. Cyborg rights activist Aral Balkan wrote a piece yesterday arguing that perhaps Berners-Lee is being modest about the things that concern him. From the article: It’s important to note that these (those three worrisome things) are not trends and that they’ve been in the making for far longer than twelve months. They are symptoms that are inextricably linked to the core nature of the Web as it exists within the greater socio-technological system we live under today that we call Surveillance Capitalism. Tim says we’ve “lost control of our personal data.” This is not entirely accurate. We didn’t lose control; it was stolen from us by Silicon Valley. It is stolen from you every day by people farmers; the Googles and the Facebooks of the world. It is stolen from you by an industry of data brokers, the publishing behavioural advertising industry (“adtech”), and a long tail of Silicon Valley startups hungry for an exit to one of the more established players or looking to compete with them to own a share of you. The elephants in the room — Google and Facebook — stand silently in the wings, unmentioned except as allies later on in the letter where they’re portrayed trying to “combat the problem” of misinformation. Is it perhaps foolish to expect anything more when Google is one of the biggest contributors to recent web standards at the W3C and when Google and Facebook both help fund the Web Foundation? Let me state it plainly: Google and Facebook are not allies in our fight for an equitable future — they are the enemy. These platform monopolies are factory farms for human beings; farming us for every gram of insight they can extract. If, as Tim states, the core challenge for the Web today is combating people farming, and if we know who the people farmers are, shouldn’t we be strongly regulating them to curb their abuses? Read more of this story at Slashdot.

See the article here:
‘We Didn’t Lose Control Of Our Personal Data — It Was Stolen From Us By People Farmers’

Acer penalized $115k for leaving credit card info unprotected

It wasn’t nearly as bad as Yahoo leaking 500 million users’ data, but Acer had its own hacking scare last year. Back in June, the Taiwanese computer manufacturer admitted that somebody stole credit card information for nearly 35, 000 individuals who bought from the company’s online store. The electronics giant finally settled with the New York Attorney General’s office to the tune of $115, 000 in penalties along with an assurance to shore up their digital security. During their investigation, the attorney general’s office discovered that Acer’s technical support had made serious security errors. First, they left Acer’s e-commerce platform in debugging mode from July 2015 until April 2016. This setting stores all data transferred through the website in an unencrypted, plain-text log file. Then they misconfigured the company website to allow directory browsing by any unauthorized user. At least one hacking group noticed and stole data between November 2015 and April 2016. This amounted to leaked legal names, usernames and passwords, physical addresses and credit card numbers with verification codes for over 35, 000 individuals in the US, Canada and Puerto Rico. Thankfully, the haul didn’t include social security numbers, but it’s still a painful security snafu from a known computer brand. Source: New York Attorney General’s office

Read More:
Acer penalized $115k for leaving credit card info unprotected