Ski Lift In Austria Left Control Panel Open On the Internet Slashdotby msmash on security at January 1, 1970, 1:00 am (cached at April 26, 2018, 11:36 pm)

An anonymous reader writes: Officials from the city of Innsbruck in Austria have shut down a local ski lift after two security researchers found its control panel open wide on the Internet, and allowing anyone to take control of the ski lift's operational settings. There was no authentication in place, and anyone accessing the control panel could have modified the ski lift's speed, the distance between cable cars, and cable tension. Coincidentally, researchers discovered the ski lift's control panel on the same day that NBC ran a report about a ski lift system suffering a mechanical malfunction, going at crazy speeds, and injuring 10 people. Both ski lifts were from the same vendor, but researchers say they weren't aware of the NBC report when they stumbled upon the one in Austria. Innsbruck officials shut down the ski lift for a security audit, and the ski lift is still nonoperational today.

Read more of this story at Slashdot.

Russia takes Syrians to OPCW, Western allies denounce 'stunt' AL JAZEERA ENGLISH (AJE)(cached at April 26, 2018, 11:30 pm)

Moscow says statements prove alleged gas attack in Douma was staged, but Western envoys condemn 'obscene masquerade'.
Jeff Bezos Says He Liquidates a $1 Billion of Amazon Stock Every Year To Pay For His Slashdotby msmash on space at January 1, 1970, 1:00 am (cached at April 26, 2018, 11:07 pm)

Amazon CEO Jeff Bezos spends a tiny fraction of his net worth to fund Blue Origin, the aerospace company he started in 2000. From a report: For a man worth $127 billion, that tiny fraction amounts to $1 billion a year, which he gets by liquidating Amazon stock, Bezos said at an Axel Springer awards event in Berlin, Germany, hosted by Business Insider's US editor-in-chief, Alyson Shontell. "The only way I can see to deploy this much financial resource is by converting my Amazon winnings into space travel," he said in an interview with Axel Springer CEO Mathias Dopfner. "Blue Origin is expensive enough to be able to use that fortune." Bezos said he planned to continue funding the company through that annual tradition long into the future. Bezos famously has numerous projects. He runs Amazon, owns The Washington Post, and is working on turning a mansion in Washington, DC, into a single-family home, to name a few. None of these, he said, are as relevant or as worthy of his money as Blue Origin, which he called "the most important work I'm doing."

Read more of this story at Slashdot.

New C# Ransomware Compiles Itself at Runtime Slashdotby msmash on security at January 1, 1970, 1:00 am (cached at April 26, 2018, 10:34 pm)

From a report: A new in-development ransomware was discovered that has an interesting characteristic. Instead of the distributed executable performing the ransomware functionality, the executables compiles an embedded encrypted C# program at runtime and launches it directly into memory.

Read more of this story at Slashdot.

[no title] Scripting News(cached at April 26, 2018, 10:33 pm)

Sam Yates: "When Google starts lobbying for 'ad network neutrality' and Facebook for 'social graph neutrality' then I will be impressed."
Evergreen/Frontier Status: ODB Work inessential.com(cached at April 26, 2018, 10:32 pm)

For the past few days I’ve been working on adding Frontier-like object database (ODB) support to my database framework.

It’s not finished yet — it doesn’t even build.

What it is (or, what it will be)

It’s hierarchical key-value storage. No schemas. Tables can contain tables, with no limit.

This implementation is the lowest level: the part that gets, sets, and deletes data from the database.

It’s application-agnostic, at this level — it doesn’t know about all of Frontier’s data types, for instance. A level on top of this will be needed for new-Frontier.

SQLite, my favorite hammer

I’m not actually writing a new database — I’m using SQLite. And that’s because I’ve been using SQLite for 15 years, and I love it and know it well, and I know how incredibly stable it is. I’m not willing to write my own thing, and I’m not willing to use a thing less mature and rock-solid than SQLite.

How it works:

The schema is pretty simple. There are tables and values.

Every table has an id. Every table (except the root table) has a parent_id that points to its parent table.

And every value has an odb_table_id that points to its parent table.

This way it’s easy to get a table’s children: it takes just two select statements.

(Both tables and values also have a name, since this is key-value storage.)

Tables and values will be cached in memory, so not every call will require a database read.

(Before you suggest I use something other than SQLite, know that I won’t change my mind on this.)

(Also, again: it’s not done yet. Doesn’t even build.)

Why I’m doing this now instead of something else

I’m using schema-less storage for feeds in Evergreen. (Articles and article status, on the other hand, are stored using a schema, in SQLite.)

Currently I’m writing a big binary plist with all the feed data, and it has to be rewritten every time a feed property changes. The writes are coalesced — but still, this isn’t great.

I’m using schema-less storage in part because of syncing systems: I don’t know, and can’t guess, what I’ll need to store. Different systems will have different requirements.

Also: I may add features later that require additional feed properties. I don’t know what those are.

I realized that what I really want for this is a feature from Frontier: hierarchical key-value storage.

Each system will gets its own database on the client. For each, I’ll create an odb table called feeds. Each feed will have its own subtable. The key will be its id (which may or may not be its URL, depending on the syncing system).

And inside each subtable I can put whatever I want, at any time, without having to change any schemas or implementations.

Example:

For the On My Mac account — not synced; reads feeds directly — we keep track of Etag headers in order to support conditional GET. So, for example, I’d want to get, set, and delete feeds.[feedID].etag.ifModifiedSince.

But with most syncing systems we get the feed content from the system itself — not by directly reading the feed. There might be some other data from the service to store: feeds.[feedID].syncToken, for instance.

The Smartphone Sales Slowdown is Real Slashdotby msmash on business at January 1, 1970, 1:00 am (cached at April 26, 2018, 9:34 pm)

Earnings reports from Samsung and Qualcomm on Wednesday suggest a serious industrywide slowdown in smartphone sales. Samsung's report is especially telling, since it also makes displays and other components for Apple. From a report: The smartphone business is an incredibly crowded space, so a slowdown could lead to even steeper price competition. That's a potential short-term boon for consumers, but could put the hurt on a whole host of technology companies. Samsung's take: Its written outlook was terse and brief, but damning. Of its own phones, it said "[p]rofitability in the mobile business is expected to decline quarter-over-quarter due to stagnant sales of flagship models amid weak demand and an increase in marketing expenses to address the situation." Similarly, it cautioned of weak demand in its display and chip businesses, which supply components for both Samsung and its phone rivals, including Apple. Qualcomm's take: The phone chip giant also predicted a slowdown, cutting its forecast for 3G and 4G smartphones.

Read more of this story at Slashdot.

[no title] Scripting News(cached at April 26, 2018, 9:33 pm)

BTW, since Frontier is the topic du jour, if I could wish for one new feature, a big one, I'd like to have JavaScript integrated as a fully co-equal language to UserTalk. I'd like it to be a special version of JavaScript, that has synchronous versions of code that does various net-related things, most important, a verb that makes an HTTP call and returns what's at the specified address. Without that it isn't much of a scripting language. I'd start with the codebase that Ted has been working on (see Frontier love, below).
New 'battle plan' to improve life at France's deprived suburbs AL JAZEERA ENGLISH (AJE)(cached at April 26, 2018, 9:30 pm)

French government launches plan to tackle discrimination and deprivation faced by people in poor suburban areas.
Fake Mark Zuckerbergs Scam Facebook Users Out of Their Cash Slashdotby msmash on facebook at January 1, 1970, 1:00 am (cached at April 26, 2018, 9:04 pm)

Hundreds of Facebook and Instagram accounts have been parading as Facebook CEO Mark Zuckerberg and COO Sheryl Sandberg, tricking vulnerable individuals into sending large amounts of money in order to collect bogus lottery winnings, the New York Times reports [Editor's note: the link may be paywalled]. From a report: An examination by The New York Times found 205 accounts impersonating Mr. Zuckerberg and Ms. Sandberg on Facebook and its photo-sharing site Instagram, not including fan pages or satire accounts, which are permitted under the company's rules. At least 51 of the impostor accounts, including 43 on Instagram, were lottery scams like the one that fooled Mr. Bernhardt. The fake Zuckerbergs and faux Sandbergs have proliferated on Facebook and Instagram, despite the presence of Facebook groups that track the scams and complaints about the trick dating to at least 2010. A day after The Times informed Facebook of its findings, the company removed all 96 impostor Mark Zuckerberg and Sheryl Sandberg accounts on its Facebook site. It had left up all but one of the 109 fakes on Instagram, but removed them after this article was published.

Read more of this story at Slashdot.

[no title] Scripting News(cached at April 26, 2018, 9:03 pm)

I don’t support net neutrality until it’s supported at all levels. The way it’s framed now, we’re giving control to Google, Facebook, Apple over ISPs. I don’t see any reason users should take a side in that fight since they’re all fighting over who gets to screw us.
US Senate confirms Mike Pompeo as secretary of state AL JAZEERA ENGLISH (AJE)(cached at April 26, 2018, 9:00 pm)

After a difficult confirmation process, senators vote 57-42 in favour of US President Donald Trump's nominee.
How do we solve the plastic catastrophe? AL JAZEERA ENGLISH (AJE)(cached at April 26, 2018, 9:00 pm)

Forty companies in the UK have pledged to reduce plastic waste over the next seven years.
Robot-Launched Weather Balloons in Alaska Hasten Demise of Remote Stations Slashdotby msmash on robot at January 1, 1970, 1:00 am (cached at April 26, 2018, 8:34 pm)

The National Weather Service is choosing automated launchers over human employees to deploy weather balloons in Alaska. From a report: Last Thursday, just before 3 p.m., things began stirring inside the truck-size box that sat among melting piles of snow at the airport in Fairbanks, Alaska. Inside, software ran checks on instruments to measure atmospheric temperature, humidity, and pressure; a tray slid into place; and a nozzle began filling a large balloon with gas. Finally, the roof of the box yawned open and a weather balloon took off into the sunny afternoon, instruments dangling. The entire launch was triggered with the touch of a button, 5 kilometers away at an office of the National Weather Service (NWS). The flight was smooth, just one of hundreds of twice-daily balloon launches around the world that radio back crucial data for weather forecasts. But most of those balloons are launched by people; the robotic launchers, which are rolling out across Alaska, are proving to be controversial. NWS says the autolaunchers will save money and free up staff to work on more pressing matters. But representatives of the employee union question their reliability, and say they will hasten the end of Alaska's remote weather offices, where forecasting duties and hours have already been slashed. "The autolauncher is just another nail in their coffin," says Kimberly Vaughan, a union steward in Juneau. Once deployed across the state, the $1.2 million machines, built by Finnish company Vaisala, will save about 8 hours of forecaster time a day -- and about $1 million a year at NWS, Susan Buchanan, an NWS spokesperson says.

Read more of this story at Slashdot.

Tanzanian protest fails amid heavy police presence AL JAZEERA ENGLISH (AJE)(cached at April 26, 2018, 8:30 pm)

Anti-government protests organised through social media against new cyber laws have been prevented in Tanzania.