OPM Contends 'Audit Fatigue' Hampers InfoSec Compliance (InfoRiskToday) SANS ISC SecNewsFeed(cached at November 7, 2017, 11:30 pm)

Healthcare Security Summit Features Leading CISOs (InfoRiskToday) SANS ISC SecNewsFeed(cached at November 7, 2017, 11:30 pm)

The US Is Now the Only Country In the World To Reject the Paris Climate Deal Slashdotby BeauHD on earth at January 1, 1970, 1:00 am (cached at November 7, 2017, 11:04 pm)

An anonymous reader quotes a report from The Verge: Today, Syria announced that it would sign the Paris climate agreement -- a landmark deal that commits almost 200 countries to reducing greenhouse gas emissions to fight global warming. With Nicaragua also joining the deal last month, the United States is now the only country in the world that opposes it. In June, President Donald Trump announced that the U.S. will withdraw from the Paris climate accord, unless it is renegotiated to be "fair" to the United States. But other countries in the deal, such as France, Germany, and Italy, said that's not possible. The Trump administration is also taking steps to roll back regulations passed under former President Barack Obama to achieve the emissions reduction goals set under the Paris deal. The U.S. is the second largest emitter of heat-trapping greenhouse gases in the world after China. "With Syria's decision, the relentless commitment of the global community to deliver on Paris is more evident than ever," Paula Caballero, director of the climate change program at the World Resources Institute, told the Times. "The U.S.'s stark isolation should give Trump reason to reconsider his ill-advised announcement and join the rest of the world in tackling climate change."

Read more of this story at Slashdot.

[no title] Scripting News(cached at November 7, 2017, 11:03 pm)

Many of the great things we have invented will not be discovered until long after we are dead.
[no title] Scripting News(cached at November 7, 2017, 11:03 pm)

Poll: Which is more revolutionary? 280-char tweets or Animoji?
Saudi air strikes kill children in Yemen's Hajjah area AL JAZEERA ENGLISH (AJE)(cached at November 7, 2017, 11:00 pm)

Activists and local media say at least 30 Yemenis, including women and children, were killed in raids in north Yemen.
Will GDPR Usher in Big Changes for Healthcare Security? (InfoRiskToday) SANS ISC SecNewsFeed(cached at November 7, 2017, 11:00 pm)

Marissa Mayer subpoenaed to testify before Senate on Yahoo breaches (ZDNet) SANS ISC SecNewsFeed(cached at November 7, 2017, 11:00 pm)

UPS joins blockchain alliance to spur standards development for shipping industry (Z SANS ISC SecNewsFeed(cached at November 7, 2017, 11:00 pm)

How Cloudflare Uses Lava Lamps To Encrypt the Internet Slashdotby BeauHD on encryption at January 1, 1970, 1:00 am (cached at November 7, 2017, 10:34 pm)

YouTuber Tom Scott was invited to visit Cloudflare's San Francisco headquarters to check out the company's wall of lava lamps. These decorative novelty items -- while neat to look at -- serve a special purpose for the internet security company. Cloudflare takes pictures and video of the lava lamps to turn them into "a stream of random, unpredictable bytes," which is used to help create the keys that encrypt the traffic that flow through Cloudflare's network. ZDNet reports: Cloudflare is a DNS service which also offers distributed denial-of-service (DDoS) attack protection, security, free SSL, encryption, and domain name services. Cloudflare is known for providing good standards of encryption, but it seems the secret is out -- this reputation is built in part on lava lamps. Roughly 10 percent of the Internet's traffic passes through Cloudflare, and as the firm deals with so much encrypted traffic, many random numbers are required. According to Nick Sullivan, Cloudfare's head of cryptography, this is where the lava lamps shine. Instead of relying on code to generate these numbers for cryptographic purposes, the lava lamps and the random lights, swirling blobs and movements are recorded and photographs are taken. The information is then fed into a data center and Linux kernels which then seed random number generators used to create keys to encrypt traffic. "Every time you take a picture with a camera there's going to be some sort of static, some sort of noise," Sullivan said. "So it's not only just where the bubbles are flowing through the lava lamp; it is the state of the air, the ambient light -- every tiny change impacts the stream of data." Cloudflare also reportedly uses a "chaotic pendulum" in its London office to generate randomness, and in Singapore, they use a radioactive source.

Read more of this story at Slashdot.

Is the Saudi crown prince a reformist or power-hungry? AL JAZEERA ENGLISH (AJE)(cached at November 7, 2017, 10:30 pm)

Four ministers, 11 princes detained on orders of Mohammed bin Salman in what some see as a suspicious graft crackdown.
Don't worry about those 40 Linux USB security holes. That's not a typo (The Register SANS ISC SecNewsFeed(cached at November 7, 2017, 10:30 pm)

Apache OpenOffice: We're OK With Not Being Super Cool Slashdotby msmash on opensource at January 1, 1970, 1:00 am (cached at November 7, 2017, 10:04 pm)

The Register's Thomas Claburn, interviews Jim Jagielski, Apache Software Foundation President and Apache OpenOffice project mentor. From the story: Despite being the subject of a deathwatch -- perhaps mainly by fans of rival LibreOffice -- AOO appears to be rather popular, with the 4.1.4 update racking up at least 1.6 million downloads. [...] While AOO and the ASF formulate a formal statement of direction for the project, Jagielski said more or less that all's well. "AOO is not, and isn't designed to be, the 'super coolest open source office suite with all the latest bells and whistles,'" Jagielski continued. "Our research shows that a 'basic,' functional office suite, which is streamlined with a 'simple' and uncluttered, uncomplicated UI, serves an incredible under-represented community. "Other office suites are focusing on the 'power user' which is a valuable market, for sure, but the real power and range for an open-source office suite alternative is the vast majority which is the 'rest of us. Sometimes we all forget how empowering open source is to the entire world."

Read more of this story at Slashdot.

Jojo-Role-0.2.0-TRIAL search.cpan.orgby Adriano Ferreira at January 1, 1970, 1:00 am (cached at November 7, 2017, 10:03 pm)

Role::Tiny + lexical "with"
App-Elog-0.06 search.cpan.orgby Jacob Gelbman at January 1, 1970, 1:00 am (cached at November 7, 2017, 10:03 pm)

An Apache error log viewer