Fourth US Navy Collision This Year Raises Suspicion of Cyber-Attacks Slashdotby BeauHD on security at January 1, 1970, 1:00 am (cached at August 22, 2017, 11:34 pm)

An anonymous reader quotes a report from The Next Web: Early Monday morning a U.S. Navy Destroyer collided with a merchant vessel off the coast of Singapore. The U.S. Navy initially reported that 10 sailors were missing, and today found "some of the remains" in flooded compartments. While Americans mourn the loss of our brave warriors, top brass is looking for answers. Monday's crash involving the USS John McCain is the fourth in the area, and possibly the most difficult to understand. So far this year 17 U.S. sailors have died in the Pacific southeast due to seemingly accidental collisions with civilian vessels. Should four collisions in the same geographical area be chalked up to coincidence? Could a military vessel be hacked? In essence, what if GPS spoofing or administrative lockout caused personnel to be unaware of any imminent danger or unable to respond? The Chief of Naval Operations (CNO) says there's no reason to think it was a cyber-attack, but they're looking into it: "2 clarify Re: possibility of cyber intrusion or sabotage, no indications right now...but review will consider all possibilities," tweeted Adm. John Richardson. The obvious suspects -- if a sovereign nation is behind any alleged attacks -- would be Russia, China, and North Korea, all of whom have reasonable access to the location of all four incidents. It may be chilling to imagine such a bold risk, but it's not outlandish to think a government might be testing cyber-attack capabilities in the field.

Read more of this story at Slashdot.

US sanctions target Chinese, Russians over North Korea AL JAZEERA ENGLISH (AJE)(cached at August 22, 2017, 11:30 pm)

Treasury says 'it is unacceptable' for Chinese and Russian firms and individuals to do business with Pyongyang.
Can Trump succeed in ending the war in Afghanistan? AL JAZEERA ENGLISH (AJE)(cached at August 22, 2017, 11:30 pm)

In announcement on new strategy, US president accuses Pakistan of harbouring 'terrorists' operating in Afghanistan.
Smart robots prove stupidly easy to hack for spying and murder (The Register) SANS ISC SecNewsFeed(cached at August 22, 2017, 11:30 pm)

Getting NASA To Comply With Simple FOIA Requests Is a Nightmare Slashdotby msmash on nasa at January 1, 1970, 1:00 am (cached at August 22, 2017, 11:04 pm)

From a report on Motherboard: Freedom of Information Act requests are used by journalists, private citizens, and government watchdogs to acquire public documents from government agencies. FOIAing NASA, however, can be an exercise in futility. In one recent case, Motherboard requested all emails from a specific NASA email address with a specific subject line. Other government agencies have completed similar requests with no problems. NASA, however, said it was "unclear what specific NASA records you are requesting." Possibly the only way to be more specific is to knock on NASA's door and show them a printout of what an email is. JPat Brown, executive editor of public records platform MuckRock, explained similarly frustrating experiences with NASA. "Even in cases where we've requested specific contracts by name and number, NASA has claimed that our request was too broad, and added insult to injury with a form letter rejection that includes the sentence 'we are not required to hunt for needles in bureaucratic haystacks,'" Brown told Motherboard in an email. Brown added that NASA has refused to process records unless presented with a requester's home address, something that is not included in the relevant code; and makes it more difficult for requests to obtain 'media' status.

Read more of this story at Slashdot.

Austria, Carmakers Agree To Update Software of 600,000 Diesel Cars Slashdotby msmash on transportation at January 1, 1970, 1:00 am (cached at August 22, 2017, 10:34 pm)

An anonymous reader shares a report: Austria's Transport Minister Joerg Leichtfried said on Tuesday he had agreed with carmakers to update the software of 600,000 diesel cars to reduce pollution following a similar deal struck in Germany after a large-scale emissions scandal. Leichtfried said the deal also included extra payments to buyers of more environmentally friendly cars. He said that for potential buyers of electric cars all available financial help could add up to around 10,000 euros ($11,750) per vehicle. The exact amount of incentives, which will come in addition to existing government sweeteners for e-car buyers, will be decided and paid by the carmakers depending on the model of the vehicle exchanged for an old car, the spokesman of Austrian car importers association Guenther Kerle said.

Read more of this story at Slashdot.

Evergreen Status inessential.comat January 1, 1970, 8:00 am (cached at August 22, 2017, 10:32 pm)

The current goal is a Spring 2018 release of Evergreen 1.0. Which is rather ambitious, I know, and I wouldn’t be shocked if it was Spring 2019. But that’s the goal.

The build is currently broken, has been broken for months, and will continue as broken for at least another few weeks.

Here’s the scoop: I decided to do syncing in 1.0. It will probably be just one system at first (most likely FeedBin, since that’s what I use) — but this meant looking at the data and database level and figuring out what’s needed to make it usable when syncing. I’m in the middle of making the needed changes.

(Originally each syncing system was going to have its own database code, but I realized that that would be foolish.)

And, because I’m such a weird database-code-loving freak, I’m not using Core Data. (Total dummy, me. Don’t tell me.) An example is DatabaseLookupTable.swift, which manages relationships.

* * *

Progress is slow, since I don’t get to work on it every day, and even when I do it’s often just for half an hour. There are occasional days where I get a few hours. But, except when I’m on vacation, progress is steady — and that’s how you get things done. (It helps to be obsessed.)

(Frontier, meanwhile, is on the back burner — I picked Evergreen to ship first just because it was further along. I’ll get back to it.)

US: Charlottesville votes to shroud Confederate statues AL JAZEERA ENGLISH (AJE)(cached at August 22, 2017, 10:30 pm)

Council votes to cover two statues in black fabric at meeting packed with residents angry over white supremacist rally.
UNICEF: Boko Haram use of child bombers soars AL JAZEERA ENGLISH (AJE)(cached at August 22, 2017, 10:30 pm)

At least 83 children, mostly girls, used by the armed group in suicide attacks this year, says the UN agency.
How IoT and OT collaborate to usher in the data-driven factory of the future (IT Too SANS ISC SecNewsFeed(cached at August 22, 2017, 10:30 pm)

Researchers Demo Remote Hacking of Industrial Cobots (SecurityWeek) SANS ISC SecNewsFeed(cached at August 22, 2017, 10:30 pm)

OIG Finds Security Weaknesses in Two More Medicaid Programs (InfoRiskToday) SANS ISC SecNewsFeed(cached at August 22, 2017, 10:30 pm)

Apple iCloud Keychain easily slurped, ElcomSoft says (The Register) SANS ISC SecNewsFeed(cached at August 22, 2017, 10:30 pm)

Ask Slashdot: What Are Some Cloud Backup Solutions That You Recommend? Slashdotby msmash on storage at January 1, 1970, 1:00 am (cached at August 22, 2017, 10:04 pm)

New submitter OneHundredAndTen writes: After having used the services of CrashPlan for my backups for a few years now, I have just learned that CrashPlan is exiting the home backup business. Although this won't be happening for another 14 months, they have the chutzpah of recommending a provider (Carbonite) that does not support Linux. Looking in the net, there are not so many alternatives available -- unless you go with somebody that charges you $5/mo and up for a measly 100GB, or (occasionally) 1TB. Fine for a little phone, but not for the several TB worth of video I have shot over the years. Anybody aware of decent cloud backup solutions that support Linux, and that offer a maximum backup capacity that is not ridiculously small? Reader cornjones asks a similar question: My use case: Backups for several computers, both at my house and scattered family machines Encrypted locally by a key I set, only encrypted bits are stored offsite I have a copy of my data onsite. I primarily want to protect against lost drives or fire (or ransomware attack) Ideally, I would be able to point it at a NAS, which I don't have now. The plan I was on was 10 computers, unlimited data, for 4 years @ $429. Lower is better, but I am willing to pay in that range. Across my machines, I probably have about 1TB of bulk storage and 10 or so machines w/, say, 60GB backups each.

Read more of this story at Slashdot.

Let Consumers Sue Companies Slashdotby msmash on court at January 1, 1970, 1:00 am (cached at August 22, 2017, 10:04 pm)

Richard Cordray, the director of the Consumer Financial Protection Bureau, writes: When a data breach at Home Depot in 2014 led to losses for banks nationwide, a group of banks filed a class-action lawsuit seeking compensation. Companies have the choice of taking legal action together. Yet consumers are frequently blocked from exercising the same legal right when they believe that companies have wronged them. That's because many contracts for products like credit cards and bank accounts have mandatory arbitration clauses that prevent consumers from joining group lawsuits, forcing them to go it alone. For example, a group lawsuit against Wells Fargo for secretly opening phony bank accounts was blocked by arbitration clauses that pushed individual consumers into closed-door proceedings. In 2010, the Consumer Financial Protection Bureau was authorized to study mandatory arbitration and write rules consistent with the study. After five years of work, we recently finalized a rule to stop companies from denying groups of consumers the option of going to court when they are treated unfairly. Opponents have unleashed attacks to overturn the rule, and the House just passed legislation to that end. Before the Senate decides whether to protect companies or consumers, it's worth correcting the record. First, opponents claim that plaintiffs are better served by acting individually than by joining a group lawsuit. This claim is not supported by facts or common sense. Our study contained revealing data on the results of group lawsuits and individual actions. We found that group lawsuits get more money back to more people. In five years of group lawsuits, we tallied an average of $220 million paid to 6.8 million consumers per year. Yet in the arbitration cases we studied, on average, 16 people per year recovered less than $100,000 total. It is true that the average payouts are higher in individual suits. But that is because very few people go through arbitration, and they generally do so only when thousands of dollars are at stake, whereas the typical group lawsuit seeks to recover small amounts for many people. Almost nobody spends time or money fighting a small fee on their own. As one judge noted, "only a lunatic or a fanatic sues for $30."

Read more of this story at Slashdot.