NSA-Leaking Shadow Brokers Just Dumped Its Most Damaging Release Yet Slashdotby BeauHD on security at January 1, 1970, 1:00 am (cached at April 14, 2017, 11:34 pm)

An anonymous reader quotes a report from Ars Technica: The Shadow Brokers -- the mysterious person or group that over the past eight months has leaked a gigabyte worth of the National Security Agency's weaponized software exploits -- just published its most significant release yet. Friday's dump contains potent exploits and hacking tools that target most versions of Microsoft Windows and evidence of sophisticated hacks on the SWIFT banking system of several banks across the world. Friday's release -- which came as much of the computing world was planning a long weekend to observe the Easter holiday -- contains close to 300 megabytes of materials the leakers said were stolen from the NSA. The contents (a convenient overview is here) included compiled binaries for exploits that targeted vulnerabilities in a long line of Windows operating systems, including Windows 8 and Windows 2012. It also included a framework dubbed Fuzzbunch, a tool that resembles the Metasploit hacking framework that loads the binaries into targeted networks. Independent security experts who reviewed the contents said it was without question the most damaging Shadow Brokers release to date. One of the Windows zero-days flagged by Hickey is dubbed Eternalblue. It exploits a remote code-execution bug in the latest version of Windows 2008 R2 using the server message block and NetBT protocols. Another hacking tool known as Eternalromance contains an easy-to-use interface and "slick" code. Hickey said it exploits Windows systems over TCP ports 445 and 139. The exact cause of the bug is still being identified. Friday's release contains several tools with the word "eternal" in their name that exploit previously unknown flaws in Windows desktops and servers.

Read more of this story at Slashdot.

The Great Japan Potato-Chip Crisis: Panic Buying, $12 Bags Slashdotby msmash on japan at January 1, 1970, 1:00 am (cached at April 14, 2017, 11:04 pm)

Demand for potato chips has surged in Japan this week, with products on offer for 6 times their retail price online after Japanese snack company Calbee halted the sale of some of its most popular chip brands. From a report: Calbee's pizza-flavored chips were going for about 1,250 yen ($12) on Yahoo Japan Corp.'s auction website Friday. One bag usually sells for less than 200 yen. Photos of near-empty shelves at their local supermarkets were trending on Twitter. The crunch came after Calbee warned on Monday that it will temporarily halt the sale of 15 types of potato chips due to a bad crop in Hokkaido, a key potato-producing region. The northern island was hit by a record number of typhoons last year. Calbee, which has a market value of 507.9 billion yen and is 20 percent-owned by PepsiCo Inc., has a 73 percent market share of potato chips. Potato chips are a big deal in Japan, a country also known for its senbei rice crackers and Pocky sticks. Calbee's potato-snack products were the most and second-most popular snacks in a TV Asahi poll of 10,000 people and 13 confectionery makers last year, and the subject of a primetime show that lasted more than two hours.

Read more of this story at Slashdot.

The Great Japan Potato-Chip Crisis: Panic Buying, $12 Bags Slashdotby msmash on japan at January 1, 1970, 1:00 am (cached at April 14, 2017, 11:04 pm)

Demand for potato chips has surged in Japan this week, with products on offer for 6 times their retail price online after Japanese snack company Calbee halted the sale of some of its most popular chip brands. From a report: Calbee's pizza-flavored chips were going for about 1,250 yen ($12) on Yahoo Japan Corp.'s auction website Friday. One bag usually sells for less than 200 yen. Photos of near-empty shelves at their local supermarkets were trending on Twitter. The crunch came after Calbee warned on Monday that it will temporarily halt the sale of 15 types of potato chips due to a bad crop in Hokkaido, a key potato-producing region. The northern island was hit by a record number of typhoons last year. Calbee, which has a market value of 507.9 billion yen and is 20 percent-owned by PepsiCo Inc., has a 73 percent market share of potato chips. Potato chips are a big deal in Japan, a country also known for its senbei rice crackers and Pocky sticks. Calbee's potato-snack products were the most and second-most popular snacks in a TV Asahi poll of 10,000 people and 13 confectionery makers last year, and the subject of a primetime show that lasted more than two hours.

Read more of this story at Slashdot.

Save $300 on CoccoaConf Next Door inessential.comat January 1, 1970, 8:00 am (cached at April 14, 2017, 11:02 pm)

My pals at CocoaConf asked me to remind you that the Early Bird sale ends in two weeks for CocoaConf Next Door — the one taking place in San Jose during WWDC.

I’ll be there. At least in the afternoons.

Check out the speakers list. Yummy, chewy, nutty speakers list.

Massive dump landslide kills at least six in Sri Lanka AL JAZEERA ENGLISH (AJE)(cached at April 14, 2017, 11:00 pm)

Rescuers search for survivors after fire caused the 91-metre-tall rubbish dump to collapse, burying dozens of homes.
Massive dump landslide kills at least six in Sri Lanka AL JAZEERA ENGLISH (AJE)(cached at April 14, 2017, 11:00 pm)

Rescuers search for survivors after fire caused the 91-metre-tall rubbish dump to collapse, burying dozens of homes.
Frontier Diary #4: The QuickDraw Problem and Where It Led Me inessential.comat January 1, 1970, 8:00 am (cached at April 14, 2017, 10:33 pm)

In my fork of Frontier there are still over 600 deprecation warnings. A whole bunch of these are due to QuickDraw calls.

For those who don’t know: QuickDraw was how, in the old days, you drew things to the Mac’s screen. It was amazing for its time and pretty easy to work with. Functions included things like MoveTo, LineTo, DrawLine, FrameOval, and so on. All pretty straightforward.

These days we have Core Graphics instead, and we have higher-level things like NSBezierPath. QuickDraw was simpler — though yes, sure, that was partly because it did less.

* * *

I was looking at all these deprecation warnings for QuickDraw functions and wondering how I’m ever going to get through them.

I could, after all, convert all or most of them to the equivalent Core Graphics thing. But sheesh, what a bunch of work.

And, in the end, it would still be a Carbon app, but with modern drawing.

* * *

So I thought about it from another angle. The goal is to get to the point where it’s a 64-bit Cocoa app. All these QuickDraw calls are in the service of UI — so why not just start over with a Cocoa UI?

The app has some outlines (database browser, script editor, etc.), a basic text editor, and a handful of small dialogs. And all of that is super-easy in Cocoa.

Use an NSOutlineView, NSTextView, and some xibs for the dialogs, and we’re done. (Well, after some work, but not nearly the same amount of work as actually writing an outliner from scratch.)

In other words, instead of going from the bottom up — porting the existing source code — I decided to start from the top down.

I started a new workspace and started a new Frontier project: a Cocoa app with Swift as the default language.

Then I looked at the existing source and thought about how to organize things. I came up with this:

I like using frameworks, because it helps enforce separation, and it helps in doing unit testing. And frameworks are so easy with Swift these days.

Hardly any of this is filled-in yet. I’ve got the barest start on FrontierVerbs. Ted Howard, my partner in all this, is taking UserTalk.framework and FrontierDB.framework.

In the end, it’s possible that no code from the original code base survives. Which is totally fine. But it also means that this is no quick project.

At this point I should probably put it up on GitHub, since it’s easier to write about it if I can link to the code. I’ll do that soon, possibly on the weekend.

Ubiquiti Evolving (IT Toolbox Blogs) SANS ISC SecNewsFeed(cached at April 14, 2017, 10:30 pm)

People - your weakest link (IT Toolbox Blogs) SANS ISC SecNewsFeed(cached at April 14, 2017, 10:30 pm)

Ubiquiti Evolving (IT Toolbox Blogs) SANS ISC SecNewsFeed(cached at April 14, 2017, 10:30 pm)

All ready for that Easter holiday? Here's a mild MySQL security bug (The Register) SANS ISC SecNewsFeed(cached at April 14, 2017, 10:30 pm)

People - your weakest link (IT Toolbox Blogs) SANS ISC SecNewsFeed(cached at April 14, 2017, 10:30 pm)

All ready for that Easter holiday? Here's a mild MySQL security bug (The Register) SANS ISC SecNewsFeed(cached at April 14, 2017, 10:30 pm)

A New Survey Shows Consumers Are Not That Freaked Out By Tech Slashdotby msmash on robot at January 1, 1970, 1:00 am (cached at April 14, 2017, 10:06 pm)

Lippincott, a global creative consultancy, asked 2,000 "leading edge" consumers in the U.S. whether they were excited to welcome our robot overlords or terrified of them. A report on FastCompany adds: Some of their findings go against conventional wisdom, like the belief that consumers are scared about the future. Turns out 80 percent said they are excited about changes in technology. Some 78 percent feel more powerful and in control of their lives thanks to the support from smart machines, artificial intelligence, and robotics. There is some anxiety about the incursion of tech into our lives, with over 40 percent reporting that they are scared about changes to the economy, society, culture, and the government. Despite that, 64 percent of them still expect that the world will be better in 10 years than it is today.

Read more of this story at Slashdot.

A New Survey Shows Consumers Are Not That Freaked Out By Tech Slashdotby msmash on robot at January 1, 1970, 1:00 am (cached at April 14, 2017, 10:06 pm)

Lippincott, a global creative consultancy, asked 2,000 "leading edge" consumers in the U.S. whether they were excited to welcome our robot overlords or terrified of them. A report on FastCompany adds: Some of their findings go against conventional wisdom, like the belief that consumers are scared about the future. Turns out 80 percent said they are excited about changes in technology. Some 78 percent feel more powerful and in control of their lives thanks to the support from smart machines, artificial intelligence, and robotics. There is some anxiety about the incursion of tech into our lives, with over 40 percent reporting that they are scared about changes to the economy, society, culture, and the government. Despite that, 64 percent of them still expect that the world will be better in 10 years than it is today.

Read more of this story at Slashdot.