Amy Klobuchar Calls For Net Neutrality 'Guarantee' In 2020 Presidential Announcement Slashdotby BeauHD on democrats at January 1, 1970, 1:00 am (cached at February 11, 2019, 11:34 pm)

Sen. Amy Klobuchar (D-Minn.) said she wanted to "guarantee" net neutrality for all Americans during her 2020 presidential campaign kickoff speech. "[T]he senator bringing it up in her announcement marked perhaps the most high-profile stage the issue has had in terms of recent presidential politics," reports The Daily Dot. From the report: The Minnesota senator brought up the issue among other technology platform goals, including privacy and cybersecurity. "Way too many politicians have their heads stuck in the sand when it comes to the digital revolution. 'Hey guys, it's not just coming. It's here.' If you don't know the difference between a hack and Slack, it's time to pull off the digital highway," she said. "What would I do as president? We need to put some digital rules of the road into law when it comes to people's privacy." She added: "For too long the big tech companies have been telling you, don't worry, we've got your back," she said. "While your identities, in fact, are being stolen and your data is being mined. Our laws need to be as sophisticated as the people who are breaking them. We must revamp our nation's cybersecurity and guarantee net neutrality for all. And we need to end the digital divide by pledging to connect every household to the internet by 2022, and that means you, rural America." Other Democrats seeking the 2020 nomination have shown support for net neutrality in the past. Rep. Tulsi Gabbard (D-Hawaii) tweeted late last month about reports suggesting that telecom investments have not risen since the FCC's controversial repeal of net neutrality, calling the decision "another handout to big corporations & telecom giants." Sen. Elizabeth Warren (D-Mass.) also told a crowd in Iowa last month that she believed "in net neutrality the same way I believe everybody should have access to electricity," according to the Washington Post.

Read more of this story at Slashdot.

New sentence sought for former Chicago officer Jason Van Dyke AL JAZEERA ENGLISH (AJE)(cached at February 11, 2019, 11:30 pm)

Illinois' attorney general seeks harsher punishment for ex-officer who pumped 16 shots into 17-year-old McDonald.
US politician Ilhan Omar apologises over Israel tweet AL JAZEERA ENGLISH (AJE)(cached at February 11, 2019, 11:30 pm)

Muslim-American Ilhan Omar says she 'unequivocally' apologises after critics claimed she tweeted anti-Semitic trope.
Doomsday Docker Security Hole Uncovered Slashdotby BeauHD on security at January 1, 1970, 1:00 am (cached at February 11, 2019, 11:04 pm)

An anonymous reader quotes a report from ZDNet: One of the great security fears about containers is that an attacker could infect a container with a malicious program, which could escape and attack the host system. Well, we now have a security hole that could be used by such an attack: RunC container breakout, CVE-2019-5736. RunC is the underlying container runtime for Docker, Kubernetes, and other container-dependent programs. It's an open-source command-line tool for spawning and running containers. Docker originally created it. Today, it's an Open Container Initiative (OCI) specification. It's widely used. Chance are, if you're using containers, you're running them on runC. According to Aleksa Sarai, a SUSE container senior software engineer and a runC maintainer, security researchers Adam Iwaniuk and Borys Popawski discovered a vulnerability, which "allows a malicious container to (with minimal user interaction) overwrite the host runc binary and thus gain root-level code execution on the host. The level of user interaction is being able to run any command (it doesn't matter if the command is not attacker-controlled) as root." To do this, an attacker has to place a malicious container within your system. But, this is not that difficult. Lazy sysadmins often use the first container that comes to hand without checking to see if the software within that container is what it purports to be. Red Hat technical product manager for containers, Scott McCarty, warned: "The disclosure of a security flaw (CVE-2019-5736) in runc and docker illustrates a bad scenario for many IT administrators, managers, and CxOs. Containers represent a move back toward shared systems where applications from many different users all run on the same Linux host. Exploiting this vulnerability means that malicious code could potentially break containment, impacting not just a single container, but the entire container host, ultimately compromising the hundreds-to-thousands of other containers running on it. While there are very few incidents that could qualify as a doomsday scenario for enterprise IT, a cascading set of exploits affecting a wide range of interconnected production systems qualifies...and that's exactly what this vulnerability represents."

Read more of this story at Slashdot.

US: Synagogue massacre suspect pleads not guilty to new charges AL JAZEERA ENGLISH (AJE)(cached at February 11, 2019, 10:30 pm)

White nationalist Robert Bowers pleads not guilty to new federal charges related to 2018's Pittsburgh synagogue shooting
US lawmakers try to save shutdown talks as Trump heads to border AL JAZEERA ENGLISH (AJE)(cached at February 11, 2019, 10:30 pm)

After negotiations broke down over the weekend, politicians scramble to save talks before February 15 deadline.
Iran and Israel trade threats of destruction AL JAZEERA ENGLISH (AJE)(cached at February 11, 2019, 10:30 pm)

On Islamic revolution's 40th anniversary, regional rivals engage in a war of words threatening to attack each other.
Microsoft: 70 Percent of All Security Bugs Are Memory Safety Issues Slashdotby msmash on microsoft at January 1, 1970, 1:00 am (cached at February 11, 2019, 10:04 pm)

Around 70 percent of all the vulnerabilities in Microsoft products addressed through a security update each year are memory safety issues; a Microsoft engineer revealed last week at a security conference. From a report: Memory safety is a term used by software and security engineers to describe applications that access the operating system's memory in a way that doesn't cause errors. Memory safety bugs happen when software, accidentally or intentionally, accesses system memory in a way that exceeds its allocated size and memory addresses. Users who often read vulnerability reports come across terms over and over again. Terms like buffer overflow, race condition, page fault, null pointer, stack exhaustion, heap exhaustion/corruption, use after free, or double free -- all describe memory safety vulnerabilities. Speaking at the BlueHat security conference in Israel last week, Microsoft security engineer Matt Miller said that over the last 12 years, around 70 percent of all Microsoft patches were fixes for memory safety bugs.

Read more of this story at Slashdot.

Is the world failing Yemen? AL JAZEERA ENGLISH (AJE)(cached at February 11, 2019, 10:00 pm)

Yemenis mark the eighth anniversary of the revolution which toppled President Ali Abdullah Saleh.
Who are the 12 Catalan leaders facing years in prison? AL JAZEERA ENGLISH (AJE)(cached at February 11, 2019, 10:00 pm)

Catalan secessionist leaders charged with rebellion were moved from Barcelona to Madrid for the 'trial of the century'.
Tobacco Use is Soaring Among US Kids, Driven By E-cigarettes Slashdotby msmash on usa at January 1, 1970, 1:00 am (cached at February 11, 2019, 9:35 pm)

Public health officials Monday said there's a growing epidemic of tobacco products currently used by children -- 4.9 million high school and middle school kids used tobacco products in 2018 up from 3.6 million in 2017 -- mainly due to a growth in e-cigarette usage. From a report: For the fifth year in a row, e-cigs were the most popular product amongst high school students, but in 2018 it reached unprecedented epidemic levels, with the addition of another 1.5 million kids, said Anne Schuchat, principal deputy director of the Centers for Disease Control and Prevention. "Current users" are defined as people who've used a tobacco product in past 30 days. "Frequent users" are defined as people who've used the product for more than 20 out of the past 30 days.

Read more of this story at Slashdot.

Acting Pentagon chief: no orders to withdraw from Afghanistan AL JAZEERA ENGLISH (AJE)(cached at February 11, 2019, 9:30 pm)

Acting US Defense Secretary Patrick Shanahan in Kabul discussed peace talks and the fight against the Taliban.
US-backed Syrian forces battle to capture last ISIL enclave AL JAZEERA ENGLISH (AJE)(cached at February 11, 2019, 9:00 pm)

ISIL snipers, landmines slow US-backed militia's advance on remaining holdouts in eastern Deir Az Zor province.
Software Engineer Loses Life Savings in Quadriga Imbroglio Slashdotby msmash on money at January 1, 1970, 1:00 am (cached at February 11, 2019, 8:34 pm)

Tong Zou wasn't a stereotypical crypto bro bent on accumulating flashy trophies such as Lamborghinis when he deposited his life savings into Quadriga CX's digital exchange. The 30-year-old software engineer, who'd been working in California for seven years, just wanted to save a few bucks on transfer fees after deciding to move to Vancouver. It proved to be a C$560,000 ($422,000) mistake. From a report: "It's all my savings, so I'm just living on what little I have left and trying to start over," Zou said in a phone interview Friday from Vancouver, where he has been living out of an AirBnB for the past month. "It pretty much took everything away from me." Zou is one of Quadriga's 115,000 clients who are out of luck after the sudden death of the firm's founder left C$190 million in cryptocurrencies protected by his passwords unretrievable. The exchange has halted operations and was granted protection from creditors on Feb. 5 in Nova Scotia Supreme Court in Halifax.

Read more of this story at Slashdot.

Egypt accelerates efforts to extend Sisi's rule AL JAZEERA ENGLISH (AJE)(cached at February 11, 2019, 8:30 pm)

Legislators will decide on Wednesday whether to send the constitutional amendments to the legislative committee.