Apple Pay Exposes Insecure Bank Policies TidBITS(cached at March 18, 2015, 11:37 pm)

Apple Pay is being blamed for a rash of new credit card fraud cases. TidBITS Security Editor Rich Mogull argues that it’s merely exposing existing weaknesses in bank security.

 

Read the full article at TidBITS, the oldest continuously published technology publication on the Internet. To get a full-text RSS feed, help support our work and become a TidBITS member! Members also enjoy an ad-free version of our Web site, email delivery of individual articles, the ability to make long comments with live links, and discounts on Take Control orders and other Apple-related products.

Netanyahu ställs inför svåra utmaningar SvD Utrikes(cached at March 18, 2015, 11:37 pm)

Tisdagkvällens besked om dött lopp vändes under nattens rösträkning till en storseger för premiärminister Benjamin Netanyahu. Rädslan triumferade över hoppet, skriver SvD:s Catrin Ormestad om valet till det tjugonde knesset.
Flera skadade i skottlossning SvD Inrikes(cached at March 18, 2015, 11:37 pm)

Flera personer har skadats vid en skottlossning på Vårväderstorget på Hisingen i Göteborg, uppger polisen i Västra Götaland. Larmet kom klockan 22.23.
Ask Slashdot: Building a Home Media Center/Small Server In a Crawlspace? Slashdotby timothy on media at January 1, 1970, 1:00 am (cached at March 18, 2015, 11:36 pm)

An anonymous reader writes "I've decided it's time for me to build a separate machine specifically for use as a Media Center/Small Home Server. My wife and I haven't had cable TV in years, instead relying entirely on Netflix, other streaming sites, and hard copies we've bought over the years. Having just finished ripping our entire media collection (CDs, DVDs, and even our vinyls and VHS with the help of a capture card and some sweet digital voodoo) to a couple HDDs, I'm feeling froggy. Up until now we've been using WDTV Live, and it's been pretty snazzy, but I want to upgrade to a dedicated media machine instead of piggybacking off of my office computer. It'll be a Windows based machine utilizing Plex, and it's going in the crawlspace of the house. The crawlspace in question is unfinished, but I do have a dry concrete slab down there where I can put/mount/assemble something. Cooling won't be an issue obviously, and I am keeping a close eye on hardware specs with regards to moisture. It is still a crawlspace though. What would be a good setup to to house the hardware? Priorities being to safeguard against moisture, vermin, and dirt. Modified PC Tower? Rack? Build an enclosure? Something I haven't considered? Please assume I'm stubborn and absolutely dead-set on putting it in the crawlspace to avoid the discussion devolving into the 'best' place to put a media machine."

Read more of this story at Slashdot.

Apps submitted to Google Play are now reviewed by 'experts' (SC Magazine) SANS ISC SecNewsFeed(cached at March 18, 2015, 11:30 pm)

New Security Mindset: Focus On The Interior (Dark Reading) SANS ISC SecNewsFeed(cached at March 18, 2015, 11:30 pm)

Further (a roadmap for pfSense) (Reddit) SANS ISC SecNewsFeed(cached at March 18, 2015, 11:30 pm)

Kvinna överfölls i motionsspår SvD Inrikes(cached at March 18, 2015, 11:07 pm)

En maskerad man överföll en kvinna i ett motionsspår i Linköping vid niotiden på onsdagskvällen.
Microsoft Blacklists Fake Finnish Certificate Slashdotby timothy on microsoft at January 1, 1970, 1:00 am (cached at March 18, 2015, 11:06 pm)

jones_supa writes Microsoft has issued a warning that a fraudulent SSL digital certificate has been issued in the name of a Finnish version of its Windows Live service. Although the company says it has revoked the certificate, security experts warn that older software may continue to "trust" the known bad certificate for months or even years, and that attackers could use it to trick users into running malware. "Microsoft is aware of an improperly issued SSL certificate for the domain 'live.fi' that could be used in attempts to spoof content, perform phishing attacks or perform man-in-the-middle attacks," Microsoft says in a March 16 security alert. "It cannot be used to issue other certificates, impersonate other domains or sign code. This issue affects all supported releases of Microsoft Windows. Microsoft is not currently aware of attacks related to this issue."

Read more of this story at Slashdot.

Barcelona knock Manchester City out of Champions League AL JAZEERA ENGLISH (AJE)(cached at March 18, 2015, 11:00 pm)

Spanish club win the last-16 tie 3-1 on aggregate to advance to the quarter-finals.
Barcelona knock Manchester City out of Champions League AL JAZEERA ENGLISH (AJE)(cached at March 18, 2015, 11:00 pm)

Spanish club win the last-16 tie 3-1 on aggregate to advance to the quarter-finals.
Court rules New York sheriff's office must turn over 'stingray' docs to NYCLU (SC Ma SANS ISC SecNewsFeed(cached at March 18, 2015, 11:00 pm)

Court rules New York sheriff's office must turn over 'stingray' docs to NYCLU (SC Ma SANS ISC SecNewsFeed(cached at March 18, 2015, 11:00 pm)

Beyond Security Requirements: Secure Requirements (Reddit) SANS ISC SecNewsFeed(cached at March 18, 2015, 11:00 pm)

Cloud trends survey: 9 out of 10 orgs concerned about public cloud security (SC Maga SANS ISC SecNewsFeed(cached at March 18, 2015, 11:00 pm)