[no title] Scripting News(cached at August 4, 2017, 11:33 pm)

Summer Streets is tomorrow. Park Ave is open to bike riders from 72nd down to the Brooklyn Bridge. It's a treat to experience the city largely without cars on three Saturdays in August.
Engaging Hospitals In Global Hunt for Medical Device Security Flaws (InfoRiskToday) SANS ISC SecNewsFeed(cached at August 4, 2017, 11:30 pm)

Use of the Open Graph Protocol to Disguise Malicious Facebook Links, (Fri, Aug 4th) SANS Internet Storm Center, InfoCON: green(cached at August 4, 2017, 11:30 pm)

Whenever a link is posted to Facebook or other social media sites, the site will likely scan the destination page for Open Graph tags [1]. These tags may provide a link to an image to be displayed, or alternate URLs to be displayed and other meta tags.

(URLs obfuscated to protect the click-happy)

For example, the following short link hxxps://goo. gl/ 8k64yS posted to Facebook recently links tohxxp: //storage. googleapis. com/1501853956/1501853956.html, which in turn returns the following content:

meta name=viewport content=width=device-width, initial-scale=1
meta property=og:url content=http://YOUTU.BE/ /
meta property=og:type content=article /
meta property=og:title content=Video /
meta property=og:description content=355,857 View /
meta property=og:image content=https://www.youtube.com/yts/img/yt_1200-vfl4C3T0K.png /
style }/style

iframe src=hxxp:// smarturl. it/uvita onload=

the meta og: tags will tell Facebook to display a YouTube logo (og:image), and the text 355,857 View (og:description), making this look like a legitimate link to YouTube. Instead, the user is redirected to a second URL shortener in this case. smarturl.it width:300px" />

[1]http://ogp.me

---
Johannes B. Ullrich, Ph.D. , Dean of Research, SANS Technology Institute
STI|Twitter|

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
Send and Receive Faxes Cheaply with the Right iOS App TidBITS(cached at August 4, 2017, 11:05 pm)

Apps proliferate for sending and receiving that antiquated form of document transfer, the fax. Pick the right app to keep costs down.

 

Read the full article at TidBITS, the oldest continuously published technology publication on the Internet. To get a full-text RSS feed, help support our work and become a TidBITS member! Members also enjoy an ad-free version of our Web site, email delivery of individual articles, the ability to make long comments with live links, and discounts on Take Control orders and other Apple-related products.

Silicon Valley Says Trump Plan To Reduce Immigration Will Hurt Economy Slashdotby BeauHD on republicans at January 1, 1970, 1:00 am (cached at August 4, 2017, 11:04 pm)

An anonymous reader quotes a report from CBS Local: President Donald Trump's push to cut legal immigration to the United States in half is being met by opposition from Silicon Valley leaders, economists, and even some Republicans senators, who all say legal immigration is key to economic prosperity. The Trump administration Wednesday endorsed the Reforming American Immigration for a Strong Economy Act or RAISE Act, a Senate bill introduced by two Republican senators earlier this year, that aims to cut all U.S. immigration in half. Business leaders, especially those in California's tech industry, say the bill will stymie their ability to fill jobs and grow the U.S. economy. California's economy is the sixth largest in the world and many attribute that success, in part, to immigration. The Information Technology Industry Council, which represents companies including Amazon, Apple, Adobe, Dell, Facebook, Hewlett-Packard, Google, Visa, Nokia, and Microsoft railed against the bill. Dean Garfield, President and CEO of the council said, "This is not the right proposal to fix our immigration system because it does not address the challenges tech companies face, injects more bureaucratic dysfunction, and removes employers as the best judge of the employee merits they need to succeed and grow the U.S. economy." Garfield argues that the tech industry cannot find enough STEM-skilled Americans to fill open positions and that U.S. immigration policy "stops us from keeping the best and brightest innovators here in the U.S. and instead we lose out to our overseas competitors."

Read more of this story at Slashdot.

Can the US and Russia de-escalate rising tensions? AL JAZEERA ENGLISH (AJE)(cached at August 4, 2017, 11:00 pm)

Moscow accuses Washington of 'full-scale trade war' after President Trump reluctantly approves new sanctions.
What’s Wrong with the Touch Bar TidBITS(cached at August 4, 2017, 10:35 pm)

After close to a year with a 2016 MacBook Pro with Touch Bar, Josh Centers doesn’t find Apple’s new alternative input device all that useful. He explains why, and offers some suggestions for how Apple could make it better.

 

Read the full article at TidBITS, the oldest continuously published technology publication on the Internet. To get a full-text RSS feed, help support our work and become a TidBITS member! Members also enjoy an ad-free version of our Web site, email delivery of individual articles, the ability to make long comments with live links, and discounts on Take Control orders and other Apple-related products.

Popular Password Manager LastPass Doubles Price of Its Premium Plan, Removes feature Slashdotby msmash on business at January 1, 1970, 1:00 am (cached at August 4, 2017, 10:34 pm)

An anonymous reader shares a report: In November, LastPass made a big change to its service, allowing users to keep track of their passwords across all their internet-enabled mobile and desktop devices, free of charge. In addition to the free tier, the cross-platform password manager - available on iOS, Android, and Windows 10 -- also offered a Premium plan with additional features, priced at $12 per year. Today, LastPass announced another wave of changes to its lineup for individual users -- but this time, the changes are unlikely to be welcomed with open arms by its customers. LastPass Premium has now doubled in price to $24 a year, which includes "emergency access, the ability to share single passwords and items with multiple people, priority tech support, advanced multi-factor authentication, LastPass for applications, and 1GB of encrypted file storage," along with all the other features of the Free tier. In a statement, the company said, "While LastPass Free continues to offer access on all browsers and devices and the core LastPass password management functionality, unlimited sharing and emergency access are now Premium features. Free users will be able to share one item with one other individual.

Read more of this story at Slashdot.

Forget sexy zero-days. Siemens medical scanners can be pwned by two-year-old-days (T SANS ISC SecNewsFeed(cached at August 4, 2017, 10:30 pm)

Cyber Insurance: Overcoming Resistance (InfoRiskToday) SANS ISC SecNewsFeed(cached at August 4, 2017, 10:30 pm)

ESET Spreading FUD About Torrent Files, Clients Slashdotby msmash on security at January 1, 1970, 1:00 am (cached at August 4, 2017, 10:04 pm)

An anonymous reader writes: ESET has taken fear mongering, something that some security firms continue to do, to a new level by issuing a blanket warning to users to view torrent files and clients as a threat. The warning came from the company's so-called security evangelist Ondrej Kubovic, (who used extremely patchy data to try and scare the bejesus out of computer users (Google cache). Like all such attempts at FUD, his treatise ended with a claim that ESET was the one true source whereby users could obtain "knowledge" to protect themselves. "If you want to stay informed and protect yourself by building up your knowledge, read the latest pieces by ESET researchers on WeLiveSecurity," he wrote. Kubovic used the case of Transmission -- a BitTorrent client that was breached in March and August 2016 with malware implanted and aimed at macOS users -- to push his barrow. But to use this one instance to dissuade people from downloading BitTorrent clients en masse is nothing short of scaremongering. There are dozens, if not more, BitTorrent clients which enjoy much wider usage, with uTorrent being one good example. Kubovic then used the old furphy which is resorted to by those who lobby on behalf of the copyright industry -- torrents are mostly illegal files and downloading them is Not The Right Thing To Do. But then he failed to mention that hundreds of thousands of perfectly legitimate files are also offered as torrents -- for instance, this writer regularly downloads images of various GNU/Linux distributions using a BitTorrent client because it is the more community-friendly thing to do, rather than using a direct HTTP link and hogging all the bandwidth available.

Read more of this story at Slashdot.

App-RecordStream-Bio-0.24 search.cpan.orgby Thomas Sibley at January 1, 1970, 1:00 am (cached at August 4, 2017, 10:03 pm)

A collection of record-handling tools related to biology
Net-Amazon-DynamoDB-0.002000 search.cpan.orgby Arthur Axel "fREW" Schmidt at January 1, 1970, 1:00 am (cached at August 4, 2017, 10:03 pm)

Simple interface for Amazon DynamoDB
Text-Table-1.133 search.cpan.orgby Shlomi Fish at January 1, 1970, 1:00 am (cached at August 4, 2017, 10:03 pm)

Organize Data in Tables
Alien-Role-Alt-0.02 search.cpan.orgby ✈ Graham Ollis ✈ at January 1, 1970, 1:00 am (cached at August 4, 2017, 10:03 pm)

Alien::Base role that supports alternates