French President-Elect Macron Urges Action On Climate Change Slashdotby EditorDavid on earth at January 1, 1970, 1:00 am (cached at May 13, 2017, 11:04 pm)

After Sunday's election in France, Macron's victory "is likely to be a boon for the French digital economy and its startup scene," writes a foreign policy think tank blog, "but the country's frosty relationship with U.S. tech companies is likely to remain over the next five years." Yet even before he was elected as France's new president, Emmanuel Macron was already warning the U.S. that withdrawing from the international Paris Climate change agreement could cost America its brightest innovators. Thelasko writes: French President elect Emmanuel Macron has a message to U.S. scientists and engineers working on climate change. "Please, come to France. You are welcome. It's your nation. We like innovation. We want innovative people. We want people working on climate change, energy renewables and new technologies. France is your nation." Newsweek reports this week that without America's involvement, the Paris Climate agreement "will have no way of meeting its goals of reducing global net carbon emissions" -- but that Macron could persuade the U.S. to honor its agreement. ("It reportedly took just one phone call conversation between Canadian Prime Minister Justin Trudeau and the president for Trump to reconsider withdrawing entirely for NAFTA, another international agreement signed into law prior to his tenure in the Oval Office.") And in the meantime, Macron has also promised not to cut France's energy-research budget, and will even reinforce it "to accelerate our initiative."

Read more of this story at Slashdot.

French President-Elect Macron Urges Action On Climate Change Slashdotby EditorDavid on earth at January 1, 1970, 1:00 am (cached at May 13, 2017, 11:04 pm)

After Sunday's election in France, Macron's victory "is likely to be a boon for the French digital economy and its startup scene," writes a foreign policy think tank blog, "but the country's frosty relationship with U.S. tech companies is likely to remain over the next five years." Yet even before he was elected as France's new president, Emmanuel Macron was already warning the U.S. that withdrawing from the international Paris Climate change agreement could cost America its brightest innovators. Thelasko writes: French President elect Emmanuel Macron has a message to U.S. scientists and engineers working on climate change. "Please, come to France. You are welcome. It's your nation. We like innovation. We want innovative people. We want people working on climate change, energy renewables and new technologies. France is your nation." Newsweek reports this week that without America's involvement, the Paris Climate agreement "will have no way of meeting its goals of reducing global net carbon emissions" -- but that Macron could persuade the U.S. to honor its agreement. ("It reportedly took just one phone call conversation between Canadian Prime Minister Justin Trudeau and the president for Trump to reconsider withdrawing entirely for NAFTA, another international agreement signed into law prior to his tenure in the Oval Office.") And in the meantime, Macron has also promised not to cut France's energy-research budget, and will even reinforce it "to accelerate our initiative."

Read more of this story at Slashdot.

Microsoft Finally Bans SHA-1 Certificates In Its Browsers Slashdotby EditorDavid on microsoft at January 1, 1970, 1:00 am (cached at May 13, 2017, 10:05 pm)

An anonymous reader quotes ZDNet: With this week's monthly Patch Tuesday, Microsoft has also rolled out a new policy for Edge and Internet Explorer that prevents sites that use a SHA-1-signed HTTPS certificate from loading. The move brings Microsoft's browsers in line with Chrome, which dropped support for the SHA-1 cryptographic hash function in January's stable release of Chrome 56, and Firefox's February cut-off... Apple dropped support for SHA-1 in March with macOS Sierra 10.12.4 and iOS 10.3... Once Tuesday's updates are installed, Microsoft's browsers will no longer load sites with SHA-1 signed certificates and will display an error warning highlighting a security problem with the site's certificate.

Read more of this story at Slashdot.

Microsoft Finally Bans SHA-1 Certificates In Its Browsers Slashdotby EditorDavid on microsoft at January 1, 1970, 1:00 am (cached at May 13, 2017, 10:05 pm)

An anonymous reader quotes ZDNet: With this week's monthly Patch Tuesday, Microsoft has also rolled out a new policy for Edge and Internet Explorer that prevents sites that use a SHA-1-signed HTTPS certificate from loading. The move brings Microsoft's browsers in line with Chrome, which dropped support for the SHA-1 cryptographic hash function in January's stable release of Chrome 56, and Firefox's February cut-off... Apple dropped support for SHA-1 in March with macOS Sierra 10.12.4 and iOS 10.3... Once Tuesday's updates are installed, Microsoft's browsers will no longer load sites with SHA-1 signed certificates and will display an error warning highlighting a security problem with the site's certificate.

Read more of this story at Slashdot.

Thousands protest Tunisia's corruption amnesty bill AL JAZEERA ENGLISH (AJE)(cached at May 13, 2017, 10:00 pm)

Proposed law gives amnesty to businessmen accused of corruption under ousted president Ben Ali.
Thousands protest Tunisia's corruption amnesty bill AL JAZEERA ENGLISH (AJE)(cached at May 13, 2017, 10:00 pm)

Proposed law gives amnesty to businessmen accused of corruption under ousted president Ben Ali.
Google's 'Project Treble' Could Lead To Faster Android Updates Slashdotby BeauHD on android at January 1, 1970, 1:00 am (cached at May 13, 2017, 9:04 pm)

Thelasko quotes a report from Ars Technica: Ahead of Google I/O, Google has just dropped a bombshell of a blog post that promises, for real this time, that it is finally doing something about Android's update problems. "Project Treble" is a plan to modularize the Android OS, separating the OS framework code from "vendor specific" hardware code. In theory, this change would allow for a new Android update to be flashed on a device without any involvement from the silicon vendor. Google calls it "the biggest change to the low-level system architecture of Android to date," and it's already live on the Google Pixel's Android O Developer Preview. This is not a magic bullet that will solve all of Android's update problems, however. After an update is released, Google lists three steps to creating an Android update: 1. Silicon manufacturers (Qualcomm, Samsung Exynos, etc) "modify the new release for their specific hardware" and do things like make sure drivers and power management will still work. 2. OEMs (Samsung, LG, HTC) step in and "modify the new release again as needed for their devices." This means making sure all the hardware works, rebranding Android with a custom skin, adding OEM apps, and modifying core parts of the Android OS to add special features like (before 7.0) multi-window support. 3. Carriers add more apps, more branding, and "test and certify the new release."

Read more of this story at Slashdot.

Google's 'Project Treble' Could Lead To Faster Android Updates Slashdotby BeauHD on android at January 1, 1970, 1:00 am (cached at May 13, 2017, 9:04 pm)

Thelasko quotes a report from Ars Technica: Ahead of Google I/O, Google has just dropped a bombshell of a blog post that promises, for real this time, that it is finally doing something about Android's update problems. "Project Treble" is a plan to modularize the Android OS, separating the OS framework code from "vendor specific" hardware code. In theory, this change would allow for a new Android update to be flashed on a device without any involvement from the silicon vendor. Google calls it "the biggest change to the low-level system architecture of Android to date," and it's already live on the Google Pixel's Android O Developer Preview. This is not a magic bullet that will solve all of Android's update problems, however. After an update is released, Google lists three steps to creating an Android update: 1. Silicon manufacturers (Qualcomm, Samsung Exynos, etc) "modify the new release for their specific hardware" and do things like make sure drivers and power management will still work. 2. OEMs (Samsung, LG, HTC) step in and "modify the new release again as needed for their devices." This means making sure all the hardware works, rebranding Android with a custom skin, adding OEM apps, and modifying core parts of the Android OS to add special features like (before 7.0) multi-window support. 3. Carriers add more apps, more branding, and "test and certify the new release."

Read more of this story at Slashdot.

Who is to blame for the massive ransomware attack? AL JAZEERA ENGLISH (AJE)(cached at May 13, 2017, 8:30 pm)

A virus demands money from Windows users in 99 countries as banks, hospitals and well known companies are affected.
Who is to blame for the massive ransomware attack? AL JAZEERA ENGLISH (AJE)(cached at May 13, 2017, 8:30 pm)

A virus demands money from Windows users in 99 countries as banks, hospitals and well known companies are affected.
Comey was loathed by the left, reviled by the right must have been doing something SANS ISC SecNewsFeed(cached at May 13, 2017, 8:30 pm)

Comey was loathed by the left, reviled by the right must have been doing something SANS ISC SecNewsFeed(cached at May 13, 2017, 8:30 pm)

New Fileless Attack Targets North Korea (SecurityWeek) SANS ISC SecNewsFeed(cached at May 13, 2017, 8:30 pm)

New Fileless Attack Targets North Korea (SecurityWeek) SANS ISC SecNewsFeed(cached at May 13, 2017, 8:30 pm)

As World Reacts To WanaDecrypt0r, Microsoft Issues Patch For Old Windows Systems Slashdotby EditorDavid on microsoft at January 1, 1970, 1:00 am (cached at May 13, 2017, 8:04 pm)

An anonymous reader quotes the AP: Teams of technicians worked "round the clock" Saturday to restore hospital computer systems in Britain and check bank or transport services in other nations after a global cyberattack hit dozens of countries and crippled the U.K.'s health system. The worldwide attack was so unprecedented that Microsoft quickly changed its policy and announced that it will make security fixes available for free for older Windows systems, which are still used by millions of individuals and smaller businesses. [Windows XP, Windows 8, and Windows Server 2003] An anonymous reader writes: The patches are available for download from here. Microsoft also advises companies and users to disable the Windows Server Message Block version 1 protocol, as it's an old and outdated protocol, already superseded by newer versions, such as SMBv2 and SMBv3... Microsoft had released a fix for that exploit a month before, in March, in security bulletin MS17-010 [which] included fixes for Windows Vista, Windows 7, Windows 8.1, Windows 10, Windows Server 2008, Windows Server 2012, and Windows Server 2016. Below the fold are more stories about the WanaDecrypt0r ransomware.

Read more of this story at Slashdot.