By EditorDavid from Slashdot's consequences department
An anonymous reader quotes KrebsOnSecurity:
On Thursday, a Ukrainian man who hatched a plan in 2013 to send heroin to my home and then call the cops when the drugs arrived was sentenced to 41 months in prison for unrelated cybercrime charges. Separately, a 19-year-old American who admitted to being part of a hacker group that sent a heavily-armed police force to my home in 2013 was sentenced to three years probation.
Sergey Vovnenko, a.k.a. "Fly," "Flycracker" and "MUXACC1," pleaded guilty last year to aggravated identity theft and conspiracy to commit wire fraud. Prosecutors said Vovnenko operated a network of more than 13,000 hacked computers, using them to harvest credit card numbers and other sensitive information... A judge in New Jersey sentenced Vovnenko to 41 months in prison, three years of supervised released and ordered him to pay restitution of $83,368.
Separately, a judge in Washington, D.C. handed down a sentence of three year's probation to Eric Taylor, a hacker probably better known by his handle "Cosmo the God." Taylor was among several men involved in making a false report to my local police department at the time about a supposed hostage situation at our Virginia home. In response, a heavily-armed police force surrounded my home and put me in handcuffs at gunpoint before the police realized it was all a dangerous hoax known as "swatting"... Taylor and his co-conspirators were able to dox so many celebrities and public officials because they hacked a Russian identity theft service called ssndob[dot]ru. That service in turn relied upon compromised user accounts at data broker giant LexisNexis to pull personal and financial data on millions of Americans.Read Replies (0)
By EditorDavid from Slashdot's tooting-your-own-horn department
An IBM security researcher recently discovered something interesting about smart cars. An anonymous reader quotes CNN:
Charles Henderson sold his car several years ago, but he still knows exactly where it is, and can control it from his phone... "The car is really smart, but it's not smart enough to know who its owner is, so it's not smart enough to know it's been resold," Henderson told CNNTech. "There's nothing on the dashboard that tells you 'the following people have access to the car.'" This isn't an isolated problem. Henderson tested four major auto manufacturers, and found they all have apps that allow previous owners to access them from a mobile device. At the RSA security conference in San Francisco on Friday, Henderson explained how people can still retain control of connected cars even after they resell them.
Manufacturers create apps to control smart cars -- you can use your phone to unlock the car, honk the horn and find out the exact location of your vehicle. Henderson removed his personal information from services in the car before selling it back to the dealership, but he was still able to control the car through a mobile app for years. That's because only the dealership that originally sold the car can see who has access and manually remove someone from the app.
It's also something to consider when buying used IoT devices -- or a smart home equipped with internet-enabled devices.Read Replies (0)
By EditorDavid from Slashdot's big-bug-bounties department
An anonymous reader writes: "A typo in the Zerocoin source code allowed an attacker to steal 370,000 Zerocoin, which is about $592,000 at today's price," reports BleepingComputer. According to the Zcoin team, one extra character left inside Zerocoin's source code was the cause of the bug. The hacker exploited the bugs for weeks, by initiating a transaction and receiving the money many times over.
"According to the Zcoin team, the attacker (or attackers) was very sophisticated and took great care to hide his tracks," reports the site. "They say the attacker created numerous accounts at Zerocoin exchanges and spread transactions across several weeks so that traders wouldn't notice the uneven transactions volume... The Zcoin team says they worked with various exchanges to attempt and identify the attacker but to no avail.
Out of the 370,000 Zerocoin he stole, the attacker has already sold 350,000. The Zcoin team estimates the attacker made a net profit of 410 Bitcoin ($437,000)."Read Replies (0)
By EditorDavid from Slashdot's quarterback-apps department
A new arena-league football team plays on a 50-yard field and uses a mobile app that allows fans to vote on the team's next play. An anonymous reader writes:
Slate describes a receiver tackled for a short gain after the audience instructed the quarterback to throw a quick pass -- as "shouts and cheers exploded from the stands, with phones raised triumphantly in the air." The quarterback is informed of the chosen plays through an earphone in his helmet, and after one touchdown, one of the players even thanked a fan in the seats for picking a good play. "Then noses immediately returned to screens...the coach and QB were antsy, peering upward, waiting for the fans' next call as the play clock ticked down again..." The team eventually lost 78-47, but to at least make things more interactive, the players all have their Twitter handles sewn on the backs of their jerseys.
Fans can also be "virtual general managers" for a small fee, dialing in to a weekly phone call to give feedback to the team's president, and fans also selected the team's head coach from online resumes and some YouTube videos of interviews. In fact, the article says the fans even picked the team's name, with the name "Screaming Eagles" finally winning out over "Teamy McTeamface" and "Spaghetti Monsters."Read Replies (0)
By EditorDavid from Slashdot's talent-for-lawsuits department
Three months ago Shiva Ayyadurai won a $750,000 settlement from Gawker (after they'd already gone bankrupt). He'd argued Gawker defamed him by mocking Ayyadurai's claim he'd invented email, and now he's also suing Techdirt founder Michael Masnick -- who is not bankrupt, and is fighting back. Long-time Slashdot reader walterbyrd quotes Ars Technica:
In his motion, Masnick claims that Ayyadurai "is seeking to use the muzzle of a defamation action to silence those who question his claim to historical fame." He continues, "The 14 articles and 84 allegedly defamatory statements catalogued in the complaint all say essentially the same thing: that Defendants believe that because the critical elements of electronic mail were developed long before Ayyadurai's 1978 computer program, his claim to be the 'inventor of e-mail' is false"...
The motion skims the history of e-mail and points out that the well-known fields of e-mail messages, like "to," "from," "cc," "subject," "message," and "bcc," were used in ARPANET e-mail messages for years before Ayyadurai made his "EMAIL" program. Ayyadurai focuses on statements calling him a "fake," a "liar," or a "fraud" putting forth "bogus" claims. Masnick counters that such phrases are "rhetorical hyperbole" meant to express opinions and reminds the court that "[t]he law provides no redress for harsh name-calling."
The motion calls the lawsuit "a misbegotten effort to stifle historical debate, silence criticism, and chill others from continuing to question Ayyadurai's grandiose claims." Ray Tomlinson has been dead for less than a year, but in this fascinating 1998 article recalled testing the early email protocols in 1971, remembering that "Most likely the first message was QWERTYIOP."Read Replies (0)
By EditorDavid from Slashdot's debugging-your-degree department
"Testing online courses is not standard practice at traditional colleges," points out a new article at EdSurge -- though beta-testing is part of the process for other online learning sites. jyosim summarizes their report:
Coursera has recruited a volunteer corp of more than 2,500 beta testers to try out MOOCs before they launch. Other free online course providers have set up systems that catch things like mistakes in tests, or just whether videos are confusing. Traditional colleges have shied away from checking online course content before going live, citing academic freedom. But some colleges are developing checklists to judge course design and accessibility.
"It would be lovely if universities would consider ways of adopting the practice of beta testing," says Phillip Long, chief innovation officer and associate vice provost for learning sciences at the University of Texas at Austin. One factor, though, is cost. "How do you scale that at a university that has thousands of courses being taught," he asks... How much beta testing makes sense for courses, and what's the best way to do it?
A senior instructional designer at the State University of New York says "On most campuses, instructional designers have their hands full and don't have time to review the courses before they go live... We're still trying to find the magic bullet that motivates people to review other people's courses when they're not being paid."Read Replies (0)
By EditorDavid from Slashdot's creepy-toys department
It's illegal in Germany now to sell a talking doll named "My Friend Cayla," according to a story shared by Slashdot reader Bruce66423. And that's just the beginning. The Verge reports:
A German government watchdog has ordered parents to "destroy" an internet-connected doll for fear it could be used as a surveillance device. According to a report from BBC News, the German Federal Network Agency said the doll (which contains a microphone and speaker) was equivalent to a "concealed transmitting device" and therefore prohibited under German telecom law... In December last year, privacy advocates said the toy recorded kids' conversations without proper consent, violating the Children's Online Privacy Protection Act.
Cayla uses a microphone to listen to questions, sending this audio over Wi-Fi to a third-party company that converts it to text. This is then used to search the internet, allowing the doll to answer basic questions, like "What's a baby kangaroo called?" as well as play games. In addition to privacy concerns over data collection, security researchers found that Cayla can be easily hacked. The doll's insecure Bluetooth connection can be compromised, letting a third party record audio via the toy, or even speak to children using its voice.
The Electronic Privacy Information Center has said toys like this "subject young children to ongoing surveillance...without any meaningful data protection standards." One researcher pointed out that the doll was accessible from up to 33 feet away -- even through walls -- using a bluetooth-enabled device.Read Replies (0)
By EditorDavid from Slashdot's database-dollars department
SAP's licensing fees "apply even to related applications that only offer users indirect visibility of SAP data," according to a Thursday ruling by a U.K. judge. Slashdot reader ahbond quotes Network World:
The consequences could be far-reaching for businesses that have integrated their customer-facing systems with an SAP database, potentially leaving them liable for license fees for every customer that accesses their online store. "If any SAP systems are being indirectly triggered, even if incidentally, and from anywhere in the world, then there are uncategorized and unpriced costs stacking up in the background," warned Robin Fry, a director at software licensing consultancy Cerno Professional Services, who has been following the case...
What's in dispute was whether the SAP PI license fee alone is sufficient to allow Diageo's sales staff and customers to access the SAP data store via the Salesforce apps, or whether, as SAP claims, those staff and customers had to be named as users and a corresponding license fee paid. On Thursday, the judge sided with SAP on that question.Read Replies (0)
By EditorDavid from Slashdot's building-with-boards department
An anonymous reader writes:
They explain in a video on Kickstarter that "Our mission is to get children excited about technology through building and programming their own robots," and they've already raised three times their original $12,411 fundraising goal. The Raspberry Pi blog describes it as "a great kit for anyone wanting to step into the world of digital making."
Long-time Slashdot reader bjpirt adds that "It's completely open source and hackable."Read Replies (0)
By EditorDavid from Slashdot's research-rockets department
An anonymous reader quotes Business Insider:
SpaceX is preparing to launch a lethal, antibiotic-resistant superbug into orbit...to live its days in the microgravity environment of the International Space Station. The idea is not to weaponize space with MRSA -- a bacterium that kills more Americans every year than HIV/AIDS, Parkinson's disease, emphysema, and homicide combined -- but to send its mutation rates into hyperdrive, allowing scientists to see the pathogen's next moves well before they appear on Earth. The NASA-funded study will see SpaceX's Falcon 9 rocket launch colonies of MRSA into space, to be cultivated in the US National Laboratory on the International Space Station.
"We will leverage the microgravity environment on the ISS to accelerate the Precision Medicine revolution here on Earth," lead researcher Anita Goel, CEO of biotech company Nanobiosym, told Yahoo News... "Our ability to anticipate drug-resistant mutations with Gene-RADAR will lead to next generation antibiotics that are more precisely tailored to stop the spread of the world's most dangerous pathogens," says Goel.
That launch was scheduled for today, but postponed it to "take a closer look at positioning of the second stage engine nozzle." Two more externally-mounted payloads will conduct other experiments, with one monitoring lightning strikes on earth and the other measuring chemicals in the earth's atmosphere. In addition, there's also 21 science experiments that were submitted by high school students
< article continued at Slashdot's research-rockets department
>Read Replies (0)
By EditorDavid from Slashdot's missing-mail department
A developer's quest to preserve (and validate) every game ROM for the Super Nintendo Entertainment System has hit a glitch -- thanks to the U.S. postal service. Byuu, the creator of the Higan SNES emulator, had been expecting a package with 100 games from the PAL region (covering most of Europe, Africa, South America, and Oceania).
As it turns out, someone at the USPS thought it was a good idea to lose the package, thereby robbing the project of roughly $5000 and the sad hopes of ever seeing a full indexing, like the one done to the U.S set. Byuu writes... "I do still want to dump and scan the Japanese games I already purchased. But we will never have a complete PAL set.
Kotaku reports the games were worth up to £8,000, and though Byuu says the sender never requested reimbursement, it's going to happen "because I can't live with myself if it doesn't." He's asking for donations on Patreon, adding "If the package ultimately arrives, I will be refunding all donations."
In that Thursday update, Byuu writes that the post office had finally shipped him the label from the package "and nothing else, claiming the machine ate it." They've launched an investigation, reports Byuu, adding "It's still an incredibly long shot that they'll find anything, but we'll see. I really, really hope that they do."Read Replies (0)
By EditorDavid from Slashdot's embracing-avatars department
"For many disabled residents, who may spend 12 hours a day or more in Second Life, the most important moments and relationships of their lives happen inside the virtual world," reports Backchanel. "For them, the fevered fantasies of a decade ago have become reality: Second Life is where they live." mirandakatz shares this article:
Wagner James Au, who has written extensively about Second Life, estimates they may account for roughly 20 percent of users. Some active members estimate the number higher -- at as much as 50 percent...
Abundant research shows imagining movement, without actually moving the body, can have positive effects on motor skills, balance, and learning... Studies suggest the therapeutic benefits of virtual reality extend beyond movement disorders -- to chronic pain, cognitive functioning in people with ADHD and PTSD, and social skills for people on the autism spectrum.
The article describes a 90-year-old former nurse, now living in a retirement community, who's spent eight years living in a Second Life archipelago called "Virtual Ability Island" with over a thousand other members. "Watching her avatar hike trails and dance gave her the confidence to try things in the physical world that she hadn't tried in a half decade -- like stepping off a curb or standing up without any help."Read Replies (0)
By EditorDavid from Slashdot's old-emulator-for-old-games department
After years of work, a fan has finally completed a MAME version of Atari's unreleased game Primal Rage II this week, one more example of the emulator preserving digital history.
Long-time Slashdot reader AmiMoJo quotes MAME.net:
Way back in 1997, Nicola Salmoria merged a few stand-alone arcade machine emulators into the first Multiple Arcade Machine Emulator. Could he have possibly imagined the significance of what he'd built? Over the past two decades, MAME has brought together over a thousand contributors to build a system that emulates more machines than any other program. But MAME is more than that: MAME represents the idea that our digital heritage is important and should be preserved for future generations. MAME strives to accurately represent original systems, allowing unmodified software to run as intended. Today, MAME documents over thirty thousand systems, and usably emulates over ten thousand. MAME meets the definitions of Open Source and Free Software, and works with Windows, macOS, Linux and BSD running on any CPU from x86-64 to ARM to IBM zSeries.
A 20th-anniversary blog post thanked MAME's 1,600 contributors -- more than triple the number after its 10th anniversary -- and also thanks MAME's uncredited contributors. "if you've filed a bug report, distributed binaries, run a community site, or just put in a good word for MAME, we appreciate it."
I've seen MAME resurrect everything from a rare East German arcade game to a Sonic the Hedgehog popcorn machine. Anybody else have a favorite MAME experience to share?Read Replies (0)