LIVE Webinar: Financial Institutions in The Bitcoin Age: The Cloud-Driven Digital Tr SANS ISC SecNewsFeed(cached at November 10, 2017, 11:30 pm)

Following Equifax Breach, CEO Doesn't Know If Data Is Encrypted Slashdotby BeauHD on encryption at January 1, 1970, 1:00 am (cached at November 10, 2017, 11:04 pm)

An anonymous reader quotes a report from TechTarget: Equifax alerted the public in September 2017 to a massive data breach that exposed the personal and financial information -- including names, birthdays, credit card numbers and Social Security numbers -- of approximately 145 million customers in the United States to hackers. Following the Equifax breach, the former CEO Richard Smith and the current interim CEO Paulino do Rego Barros Jr. were called to testify before the Committee on Commerce, Science, and Transportation this week for a hearing titled "Protecting Consumers in the Era of Major Data Breaches." During the hearing, Sen. Cory Gardner (R-Colo.) questioned Smith and Barros about Equifax's use of -- or lack of -- encryption for customer data at rest. Smith confirmed that the company was not encrypting data at the time of the Equifax breach, and Gardner questioned whether or not that was intentional. "Was the fact that [customer] data remained unencrypted at rest the result of an oversight, or was that a decision that was made to manage that data unencrypted at rest?" Gardner asked Smith. Smith pointed out that encryption at rest is just one method of security, but eventually confirmed that a decision was made to leave customer data unencrypted at rest. "So, a decision was made to leave it unencrypted at rest?" Gardner pushed. "Correct," Smith responded. Gardner moved on to Barros and asked whether he has implemented encryption for data at rest since he took over the position on Sept. 26. Barros began to answer by saying that Equifax has done a "top-down review" of its security, but Gardner interrupted, saying it was a yes or no question. Barros stumbled again and said it was being reviewed as part of the response process and Gardner pushed again. "Yes or no, does the data remain unencrypted at rest?" "I don't know at this stage," Barros responded. "Senator, if I may. It's my understanding that the entire environment [in] which this criminal attack occurred is much different; it's a more modern environment with multiple layers of security that did not exist before. Encryption is only one of those layers of security," Smith said.

Read more of this story at Slashdot.

[no title] Scripting News(cached at November 10, 2017, 10:33 pm)

Reader query: I've had a report by one user of repeated items from Scripting News in Feedly. Are other people seeing this? In other feed readers? I've seen no problems in River5.
Here Comes the World's Biggest Shopping Spree -- Again Slashdotby msmash on business at January 1, 1970, 1:00 am (cached at November 10, 2017, 10:04 pm)

A reader shares a report: On Nov. 11, China celebrates Singles Day, a holiday dedicated to the nation's unattached. It's also the world's largest shopping festival -- and a bonanza for internet giant Alibaba Group. Up to 500 million consumers will visit sites run by the company searching for discounts on items including Bordeaux wine, UGG boots, SUVs, and high-end Japanese toilets. Citigroup estimates that Alibaba's sales during this year's event could reach 158 billion yuan ($23.8 billion). For Alibaba, Singles Day will also be a demonstration of how far its cloud business has come in eight years. At the peak of activity, Alibaba's servers may be tasked with processing 175,000 transactions a second from its own sites. "It's the day when the largest amount of computing power is needed in China," says He Yunfei, a senior product manager for Alibaba Cloud. [...] Alibaba dominates the Chinese cloud -- in part because local regulators won't issue data center operating licenses to foreign companies, curtailing the China ambitions of Amazon.com and Microsoft, the No. 1 and No. 2 cloud providers globally.

Read more of this story at Slashdot.

Devel-Chitin-0.12-TRIAL search.cpan.orgby Anthony Brummett at January 1, 1970, 1:00 am (cached at November 10, 2017, 10:03 pm)

Programmatic interface to the Perl debugging API
Hamid Karzai :US colluded with ISIL in Afghanistan AL JAZEERA ENGLISH (AJE)(cached at November 10, 2017, 10:00 pm)

Ex-Afghan president says group's presence used as excuse to drop the largest non-nuclear bomb on district in Nangarhar.
Man Who Sent GIF of Laughing Mouse To Employer After DDoS Attack Is Now Arrested Slashdotby msmash on security at January 1, 1970, 1:00 am (cached at November 10, 2017, 9:34 pm)

An anonymous reader writes: The FBI has arrested and charged a man for launching DDoS attacks against a wide range of targets, including his former employer, a Minnesota-based PoS repair shop. The man, who bought access to a VPN but didn't use it all the time, was caught after registering email accounts and sending taunting emails to victims, including his former employer. The taunting emails also included a GIF image of a laughing mouse, which eventually tied the man to the DDoS attacks as well. The guy also uploaded the image on Facebook in a post that asked people to join in DDoS attacks on banks as part of Anonymous' Operation Icarus. The suspect also created the fake email accounts using the name of another former colleague, trying to pin suspicions on him. The FBI was not only able to track the man's real IP address, but they also tied him to attacks without a doubt because he used a DDoS-for-hire service that was hacked and its database was shared with the FBI.

Read more of this story at Slashdot.

How can the crisis on Manus Island be resolved? AL JAZEERA ENGLISH (AJE)(cached at November 10, 2017, 9:30 pm)

Ten days after Australia withdrew support for its prison camp in Papua New Guinea, detainees refuse to leave.
Review: Thiel Audio's Outstanding AURORA Wireless Speakers (Forbes) SANS ISC SecNewsFeed(cached at November 10, 2017, 9:30 pm)

How did someone hijack your Gmail? Phishing, keylogger or password reuse, we're SANS ISC SecNewsFeed(cached at November 10, 2017, 9:30 pm)

Antivirus Quarantine Flaws Allow Privilege Escalation (SecurityWeek) SANS ISC SecNewsFeed(cached at November 10, 2017, 9:00 pm)

Programming Language Go Turns 8 Slashdotby msmash on programming at January 1, 1970, 1:00 am (cached at November 10, 2017, 8:34 pm)

On this day, eight years ago, a group of programmers at Google released Go, a brand-new open-source programming language that they hoped would solve some of the problems they faced with Java, C++ and other programming languages. In the past eight years, Go has gotten a tremendous traction, with Go helping drive several services running inside Google. The company, on its part, has added a handful of features to Go, including a revamped garbage collector in 2015, and support for various ARM processors. From a blog post: Go has been embraced by developers all over the world with approximately one million users worldwide. In the freshly published 2017 Octoverse by GitHub, Go has become the #9 most popular language, surpassing C. Go is the fastest growing language on GitHub in 2017 in the top 10 with 52% growth over the previous year. In growth, Go swapped places with Javascript, which fell to the second spot with 44%. In Stack Overflow's 2017 developer survey, Go was the only language that was both on the top 5 most loved and top 5 most wanted languages. People who use Go, love it, and the people who aren't using Go, want to be. [...] Since Go was first open sourced we have had 10 releases of the language, libraries and tooling with more than 1680 contributors making over 50,000 commits to the project's 34 repositories; More than double the number of contributors and nearly double the number of commits from only two years ago. This year we announced that we have begun planning Go 2, our first major revision of the language and tooling.

Read more of this story at Slashdot.

[no title] Scripting News(cached at November 10, 2017, 8:33 pm)

Poll: Should Louis C.K.'s work disappear?
Israel instructs diplomats to support Saudis: Cable AL JAZEERA ENGLISH (AJE)(cached at November 10, 2017, 8:30 pm)

Leaked cable shows Israel told diplomats to support Saudi Arabia's war of words with Iran and Lebanese group Hezbollah.
Securing Critical Data - An End-to-End Overview (IT Toolbox Blogs) SANS ISC SecNewsFeed(cached at November 10, 2017, 8:30 pm)