Former Fed Employee Fined $5,000 For Installing Bitcoin Software On Server Slashdotby BeauHD on bitcoin at January 1, 1970, 1:00 am (cached at January 30, 2017, 11:34 pm)

An anonymous reader quotes a report from Bloomberg: A former Federal Reserve employee was sentenced Friday to 12 months probation and a $5,000 fine after pleading guilty in October to installing unauthorized software on a computer server at the U.S. central bank. Nicholas Berthaume, who as a communications analyst had access to computer servers at the Fed's Board of Governors in Washington, installed software that connected to an online bitcoin network in order to earn units of the digital currency, according to a statement Monday from the central bank's Office of Inspector General. Berthaume also "modified certain security safeguards so that he could remotely access the server from home," the statement said. When confronted, he tried to cover up his actions by deleting the software; eventually he was fired and admitted guilt, the office said. His actions didn't result in the loss of any Fed information, and the board has enhanced security since the incident, the internal watchdog said. The story was first reported by The Wall Street Journal (Warning: source may be paywalled).

Read more of this story at Slashdot.

Former Fed Employee Fined $5,000 For Installing Bitcoin Software On Server Slashdotby BeauHD on bitcoin at January 1, 1970, 1:00 am (cached at January 30, 2017, 11:34 pm)

An anonymous reader quotes a report from Bloomberg: A former Federal Reserve employee was sentenced Friday to 12 months probation and a $5,000 fine after pleading guilty in October to installing unauthorized software on a computer server at the U.S. central bank. Nicholas Berthaume, who as a communications analyst had access to computer servers at the Fed's Board of Governors in Washington, installed software that connected to an online bitcoin network in order to earn units of the digital currency, according to a statement Monday from the central bank's Office of Inspector General. Berthaume also "modified certain security safeguards so that he could remotely access the server from home," the statement said. When confronted, he tried to cover up his actions by deleting the software; eventually he was fired and admitted guilt, the office said. His actions didn't result in the loss of any Fed information, and the board has enhanced security since the incident, the internal watchdog said. The story was first reported by The Wall Street Journal (Warning: source may be paywalled).

Read more of this story at Slashdot.

Google Paid Hackers $3 Million For Finding Security Flaws Last Year (Forbes) SANS ISC SecNewsFeed(cached at January 30, 2017, 11:00 pm)

Google Removes Plugin Controls From Chrome, Reports Claim Slashdotby msmash on chrome at January 1, 1970, 1:00 am (cached at January 30, 2017, 10:34 pm)

An anonymous reader shares a Ghacks report: Google made a change in Chrome 57 that removes options from the browser to manage plugins such as Google Widevine, Adobe Flash, or the Chrome PDF Viewer. If you load chrome://plugins in Chrome 56 or earlier, a list of installed plugins is displayed to you. You can use it, among other things, to disable plugins that you don't require. While you can do the same for some plugins, Flash and PDF Viewer, using Chrome's Settings, the same is not possible for the DRM plugin Widevine, and any other plugin Google may add to Chrome in the future. Starting with Chrome 57, that option is no longer available. This means essentially that Chrome users won't be able to disable -- some -- plugins anymore, or even list the plugins that are installed in the web browser. Please note that this affects Google Chrome and Chromium.Further report on BetaNews.

Read more of this story at Slashdot.

Google Removes Plugin Controls From Chrome, Reports Claim Slashdotby msmash on chrome at January 1, 1970, 1:00 am (cached at January 30, 2017, 10:34 pm)

An anonymous reader shares a Ghacks report: Google made a change in Chrome 57 that removes options from the browser to manage plugins such as Google Widevine, Adobe Flash, or the Chrome PDF Viewer. If you load chrome://plugins in Chrome 56 or earlier, a list of installed plugins is displayed to you. You can use it, among other things, to disable plugins that you don't require. While you can do the same for some plugins, Flash and PDF Viewer, using Chrome's Settings, the same is not possible for the DRM plugin Widevine, and any other plugin Google may add to Chrome in the future. Starting with Chrome 57, that option is no longer available. This means essentially that Chrome users won't be able to disable -- some -- plugins anymore, or even list the plugins that are installed in the web browser. Please note that this affects Google Chrome and Chromium.Further report on BetaNews.

Read more of this story at Slashdot.

W-2 Phishing Scams: Mitigating the Risks (InfoRiskToday) SANS ISC SecNewsFeed(cached at January 30, 2017, 10:30 pm)

Trump Immigration Ban Makes Airlines Less Secure (Forbes) SANS ISC SecNewsFeed(cached at January 30, 2017, 10:30 pm)

Facebook's New Tool Looks To Replace Traditional Two-Factor Authentication Slashdotby msmash on facebook at January 1, 1970, 1:00 am (cached at January 30, 2017, 10:04 pm)

Facebook today unveiled a new feature to let its 1.79 billion users reset passwords for other websites using its platform, an effort to further entrench the social network in people's digital lives. From a report: Delegated Recovery, as it's being called, looks to be a step forward for those afraid of losing their devices when using two-factor authentication (2FA) -- which, should be most of us. The security feature addresses the common concern of losing the device tied to your account. With Delegated Recovery, Facebook lets users set up an encrypted recovery token for sites like GitHub, and stores it at Facebook. If you lose the login information for GitHub, you'd simply log in to Facebook and send the stored token to the site to prove your identity and regain access. The token is encrypted, and Facebook can't access the information stored on it. Facebook also promises not to share it with third-party websites (aside from those you authorize).

Read more of this story at Slashdot.

Moonshine-Util-0.02 search.cpan.orgby Robert Acock at January 1, 1970, 1:00 am (cached at January 30, 2017, 10:03 pm)

Utils
Storable-3.05_02 search.cpan.orgby Reini Urban at January 1, 1970, 1:00 am (cached at January 30, 2017, 10:03 pm)

persistence for Perl data structures
DateTime-Fiction-JRRTolkien-Shire-0.20_02 search.cpan.orgby Tom Wyant at January 1, 1970, 1:00 am (cached at January 30, 2017, 10:03 pm)

DateTime omplementation of the Shire Calendar from JRR Tolkien's classic, "Lord of the Rings".
Moonshine-Component-0.02 search.cpan.orgby Robert Acock at January 1, 1970, 1:00 am (cached at January 30, 2017, 10:03 pm)

HTML Component base.
Cardinals must give Astros top 2 picks, $2M for hacking (Yahoo Security) SANS ISC SecNewsFeed(cached at January 30, 2017, 10:00 pm)

Cardinals must give Astros top 2 picks, $2M for hacking (Yahoo Security) SANS ISC SecNewsFeed(cached at January 30, 2017, 10:00 pm)

Facebook's Parse Is Shutting Down Today Slashdotby msmash on facebook at January 1, 1970, 1:00 am (cached at January 30, 2017, 9:34 pm)

Facebook acquired Parse, a toolkit and support system for mobile developers, in 2013. At the time, the social network's ambitions were high: Parse would be Facebook's way into one day harnessing developers to become a true cloud business, competing alongside the likes of Amazon, Google and Microsoft. Three years later, Facebook announced it would be shutting down Parse. Today is that day. From Parse's status page: As we previously shared, the Parse service is shutting down today. Throughout the day we will be disabling the Parse API on an app-by-app basis. When your app is disabled, you will not be able to access the data browser or export any data, and your applications will no longer be able to access the Parse API.

Read more of this story at Slashdot.