TidBITS Turns 27: Pondering the Future TidBITS(cached at April 17, 2017, 11:35 pm)

While marking the 27th anniversary of the founding of TidBITS, publisher Adam Engst looks forward to upcoming life changes that might free up enough time to rebuild the increasingly creaky technical infrastructure around TidBITS’s strong content heart.

 

Read the full article at TidBITS, the oldest continuously published technology publication on the Internet. To get a full-text RSS feed, help support our work and become a TidBITS member! Members also enjoy an ad-free version of our Web site, email delivery of individual articles, the ability to make long comments with live links, and discounts on Take Control orders and other Apple-related products.

Cylance Accused of Distributing Fake Malware Samples To Customers To Close Deals Slashdotby BeauHD on business at January 1, 1970, 1:00 am (cached at April 17, 2017, 11:34 pm)

New submitter nyman19 writes: Ars Technica reports how security vendor Cylance has been distributing non-functioning malware samples to prospective customers in order to "close the sale[s] by providing files that other products wouldn't detect" According to the report: "A systems engineer at a large company was evaluating security software products when he discovered something suspicious. One of the vendors [Cylance] had provided a set of malware samples to test -- 48 files in an archive stored in the vendor's Box cloud storage account. The vendor providing those samples was Cylance, the information security company behind Protect, a 'next generation' endpoint protection system built on machine learning. In testing, Protect identified all 48 of the samples as malicious, while competing products flagged most but not all of them. Curious, the engineer took a closer look at the files in question -- and found that seven weren't malware at all."

Read more of this story at Slashdot.

Syrian envoy slams US airfield attack 'message sending' AL JAZEERA ENGLISH (AJE)(cached at April 17, 2017, 11:30 pm)

Syrian ambassador to North Korea blasts comments that US cruise missile attack was a 'message' delivered to Pyongyang.
Cyber Security Refocused--Advanced Persistent Security (Forbes) SANS ISC SecNewsFeed(cached at April 17, 2017, 11:00 pm)

Trump Administration Kills Open.Gov, Will Not Release White House Visitor Logs Slashdotby BeauHD on government at January 1, 1970, 1:00 am (cached at April 17, 2017, 10:34 pm)

An anonymous reader quotes a report from Techdirt: It will never be said that the Trump presidency began with a presumption of openness. His pre-election refusal to release his tax returns set a bit of precedent in that regard. The immediate post-election muffling of government agency social media accounts made the administration's opacity goals um clearer. So, in an unsurprising move, the Trump administration will be doing the opposite of the Obama administration. The American public will no longer have the privilege of keeping tabs on White House visitors. TIME reports: "The Trump Administration will not disclose logs of those who visit the White House complex, breaking with his predecessor, the White House announced Friday. White House communications director Michael Dubke said the decision to reverse the Obama-era policy was due to 'the grave national security risks and privacy concerns of the hundreds of thousands of visitors annually.' Instead, the Trump Administration is relying on a federal court ruling that most of the logs are 'presidential records' and are not subject to the Freedom of Information Act." So, to further distance himself from the people he serves (and the people who elected him), Trump and his administration have shut down the transparency portal put in place by the previous Commander-in-Chief: "White House officials said the Administration is ending the contract for Open.gov, the Obama-era site that hosted the visitor records along with staff financial disclosures, salaries, and appointments. An official said it would save $70,000 through 2020 and that the removed disclosures, salaries and appointments would be integrated into WhiteHouse.gov in the coming months."

Read more of this story at Slashdot.

Venezuelan army vows loyalty to embattled president AL JAZEERA ENGLISH (AJE)(cached at April 17, 2017, 10:30 pm)

President Nicolas Maduro praises military's 'revolutionary commitment' as opponents schedule 'mother of all protests'.
Microsoft Says Previous Windows Patches Fixed Newly Leaked NSA Exploits Slashdotby msmash on microsoft at January 1, 1970, 1:00 am (cached at April 17, 2017, 10:04 pm)

Microsoft said it has already patched vulnerabilities revealed in last week's high-profile leak of suspected U.S. National Security Agency spying tools, meaning customers should be protected if they've kept their software up-to-date. From a report: Friday's leak caused concern in the security community. The spying tools include about 20 exploits designed to hack into old versions of Windows, such as Windows XP and Windows Server 2008. However, Microsoft said several patches -- one of which was made only last month -- address the vulnerabilities. "Our engineers have investigated the disclosed exploits, and most of the exploits are already patched," the company said in a blog post late on Friday. Three of the exploits found in the leak have not been patched but do not work on platforms that Microsoft currently supports, such as Window 7 or later and Exchange 2010 or later.

Read more of this story at Slashdot.

Microsoft Says Previous Windows Patches Fixed Newly Leaked NSA Exploits Slashdotby msmash on microsoft at January 1, 1970, 1:00 am (cached at April 17, 2017, 10:04 pm)

Microsoft said it has already patched vulnerabilities revealed in last week's high-profile leak of suspected U.S. National Security Agency spying tools, meaning customers should be protected if they've kept their software up-to-date. From a report: Friday's leak caused concern in the security community. The spying tools include about 20 exploits designed to hack into old versions of Windows, such as Windows XP and Windows Server 2008. However, Microsoft said several patches -- one of which was made only last month -- address the vulnerabilities. "Our engineers have investigated the disclosed exploits, and most of the exploits are already patched," the company said in a blog post late on Friday. Three of the exploits found in the leak have not been patched but do not work on platforms that Microsoft currently supports, such as Window 7 or later and Exchange 2010 or later.

Read more of this story at Slashdot.

WebService-HipChat-0.2000 search.cpan.orgby Naveed Massjouni at January 1, 1970, 1:00 am (cached at April 17, 2017, 10:03 pm)

Bindings for the HipChat API v2
WebService-HipChat-0.2000 search.cpan.orgby Naveed Massjouni at January 1, 1970, 1:00 am (cached at April 17, 2017, 10:03 pm)

Bindings for the HipChat API v2
Tk-Getopt-0.50_50 search.cpan.orgby Slaven Rezić at January 1, 1970, 1:00 am (cached at April 17, 2017, 10:03 pm)

User configuration window for Tk with interface to Getopt::Long
Tk-Getopt-0.50_50 search.cpan.orgby Slaven Rezić at January 1, 1970, 1:00 am (cached at April 17, 2017, 10:03 pm)

User configuration window for Tk with interface to Getopt::Long
Archive-Tar-Builder-2.5002 search.cpan.orgby Alexandra Hrefna Hilmisdóttir at January 1, 1970, 1:00 am (cached at April 17, 2017, 10:03 pm)

Provides a braindead tarball builder thingie
Archive-Tar-Builder-2.5002 search.cpan.orgby Alexandra Hrefna Hilmisdóttir at January 1, 1970, 1:00 am (cached at April 17, 2017, 10:03 pm)

Provides a braindead tarball builder thingie
DateTimeX-Mashup-Shiras-v0.36.12 search.cpan.orgby Jed Lund at January 1, 1970, 1:00 am (cached at April 17, 2017, 10:03 pm)

A Moose role with date attributes