BlueBorne Vulnerabilities Impact Over 5 Billion Bluetooth-Enabled Devices Slashdotby BeauHD on security at January 1, 1970, 1:00 am (cached at September 12, 2017, 11:34 pm)

An anonymous reader quotes a report from Bleeping Computer: Security researchers have discovered eight vulnerabilities -- codenamed collectively as BlueBorne -- in the Bluetooth implementations used by over 5.3 billion devices. Researchers say the vulnerabilities are undetectable and unstoppable by traditional security solutions. No user interaction is needed for an attacker to use the BleuBorne flaws, nor does the attacker need to pair with a target device. They affect the Bluetooth implementations in Android, iOS, Microsoft, and Linux, impacting almost all Bluetooth device types, from smartphones to laptops, and from IoT devices to smart cars. Furthermore, the vulnerabilities can be concocted into a self-spreading BlueTooth worm that could wreak havoc inside a company's network or even across the world. "These vulnerabilities are the most serious Bluetooth vulnerabilities identified to date," an Armis spokesperson told Bleeping Computer via email. "Previously identified flaws found in Bluetooth were primarily at the protocol level," he added. "These new vulnerabilities are at the implementation level, bypassing the various authentication mechanisms, and enabling a complete takeover of the target device." Consumers are recommended to disable Bluetooth unless you need to use it, but then turn it off immediately. When a patch or update is issued and installed on your device, you should be able to turn Bluetooth back on and leave it on safely. The BlueBorne Android App on the Google Play Store will be able to determine if a user's Android device is vulnerable. A technical report on the BlueBorne flaws is available here (PDF).

Read more of this story at Slashdot.

Iran signs deal to repair Syria's power grid AL JAZEERA ENGLISH (AJE)(cached at September 12, 2017, 11:30 pm)

Agreement points to the role Tehran is expected to play in the reconstruction of war-torn Syria.
A New Way to Learn Economics Slashdotby msmash on education at January 1, 1970, 1:00 am (cached at September 12, 2017, 11:04 pm)

John Cassidy, writing for The New Yorker: With the new school year starting, there is good news for incoming students of economics -- and anybody else who wants to learn about issues like inequality, globalization, and the most efficient ways to tackle climate change. A group of economists from both sides of the Atlantic, part of a project called CORE Econ, has put together a new introductory economics curriculum, one that is modern, comprehensive, and freely available online. In this country, many colleges encourage Econ 101 students to buy (or rent) expensive textbooks, which can cost up to three hundred dollars, or even more for some hardcover editions. The project is a collaborative effort that emerged after the world financial crisis of 2008-9, and the ensuing Great Recession, when many students (and teachers) complained that existing textbooks didn't do a good job of explaining what was happening. In many countries, groups of students demanded an overhaul in how economics was taught, with less emphasis on free-market doctrines and more emphasis on real-world problems.

Read more of this story at Slashdot.

Microsoft patches Office zero-day used to spread FinSpy surveillance malware (ZDNet) SANS ISC SecNewsFeed(cached at September 12, 2017, 11:00 pm)

Apple Finally Enters the 4K Realm, but It’ll Cost You TidBITS(cached at September 12, 2017, 10:35 pm)

The Apple TV is soon upgrading to 4K, but sticker shock may have you looking at alternatives.

 

Read the full article at TidBITS, the oldest continuously published technology publication on the Internet. To get a full-text RSS feed, help support our work and become a TidBITS member! Members also enjoy an ad-free version of our Web site, email delivery of individual articles, the ability to make long comments with live links, and discounts on Take Control orders and other Apple-related products.

Qatar-Gulf crisis boils over at Cairo meeting AL JAZEERA ENGLISH (AJE)(cached at September 12, 2017, 10:30 pm)

Heated exchange of words, which erupted on live TV, is the latest chapter in the Gulf crisis, now in its fourth month.
8 Authentication Pitfalls That Can Put You on the Road to Nowhere (InfoRiskToday) SANS ISC SecNewsFeed(cached at September 12, 2017, 10:30 pm)

Collateral Damage From The Inevitable Bitcoin Crash (Forbes) SANS ISC SecNewsFeed(cached at September 12, 2017, 10:30 pm)

Data protection concept targets your nose (ZDNet) SANS ISC SecNewsFeed(cached at September 12, 2017, 10:30 pm)

Can AI really deliver more revenue from the CRM process? (IT Toolbox Blogs) SANS ISC SecNewsFeed(cached at September 12, 2017, 10:30 pm)

Does Apple Face ID Make It Easier For Feds To Hack The iPhone X? Yes And No (Fo SANS ISC SecNewsFeed(cached at September 12, 2017, 10:30 pm)

Equifax Lobbied For Easier Regulation Before Data Breach Slashdotby msmash on business at January 1, 1970, 1:00 am (cached at September 12, 2017, 10:04 pm)

WSJ reports: Equifax was lobbying lawmakers and federal agencies to ease up on regulation of credit-reporting companies in the months before its massive data breach. Equifax spent at least $500,000 on lobbying Congress and federal regulators in the first half of 2017, according to its congressional lobbying-disclosure reports. Among the issues on which it lobbied was limiting the legal liability of credit-reporting companies. That issue is the subject of a bill that a panel of the House Financial Services Committee, which oversees the industry, discussed the same day Equifax disclosed the cyberattack that exposed personal financial data of as many as 143 million Americans. Equifax has also lobbied Congress and regulatory agencies on issues around "data security and breach notification" and "cybersecurity threat information sharing," according to its lobbying disclosures. The amount Equifax spent in the first half of this year appears to be in line with previous spending. In 2016 and 2015, the company's reports show it spent $1.1 million and $1.02 million, respectively, on lobbying activities. While the company had broadly similar lobbying issues in those years, the liability matter was new in 2017.

Read more of this story at Slashdot.

MooseX-Fastly-Role-0.04 search.cpan.orgby Leo Lapworth at January 1, 1970, 1:00 am (cached at September 12, 2017, 10:03 pm)

Fastly api from config, and purge methods
D-Link router riddled with 0-day flaws (The Register) SANS ISC SecNewsFeed(cached at September 12, 2017, 10:00 pm)

Boffins Fear We Might Be Running Out of Ideas Slashdotby msmash on science at January 1, 1970, 1:00 am (cached at September 12, 2017, 9:34 pm)

Innovation, fetishized by Silicon Valley companies and celebrated by business boosters, no longer provides the economic jolt it once did. From a report: In order to maintain Moore's Law -- by which transistor density doubles every two years or so -- it now takes 18 times as many scientists as it did in the 1970s. That means each researcher's output today is 18 times less effective in terms of generating economic value than it was several decades ago. On an annual basis, research productivity is declining at a rate of about 6.8 percent per year in the semiconductor industry. In other words, we're running out of ideas. That's the conclusion of economic researchers from Stanford University and the Massachusetts Institute of Technology. In a paper published this week through the National Bureau of Economic Research, "Are Ideas Getting Harder to Find?", economics professors Nicholas Bloom, Charles Jones, and John Van Reenen, and PhD candidate Michael Webb, defy Betteridge's Law of Headlines by concluding that an idea drought has indeed taken hold. "Across a broad range of case studies ... we find that ideas -- and in particular the exponential growth they imply -- are getting harder and harder to find," the authors declare in their paper.

Read more of this story at Slashdot.