[no title] Scripting News(cached at December 15, 2020, 11:15 pm)

A question about LG TV configuration.
Hackers at Center of Sprawling Spy Campaign Turned SolarWinds' Dominance Against It Slashdotby msmash on security at January 1, 1970, 1:00 am (cached at December 15, 2020, 11:14 pm)

An anonymous reader shares a report: On an earnings call two months ago, SolarWinds Chief Executive Kevin Thompson touted how far the company had gone during his 11 years at the helm. There was not a database or an IT deployment model out there to which his Austin, Texas-based company did not provide some level of monitoring or management, he told analysts on the Oct. 27 call. "We don't think anyone else in the market is really even close in terms of the breadth of coverage we have," he said. "We manage everyone's network gear." Now that dominance has become a liability -- an example of how the workhorse software that helps glue organizations together can turn toxic when it is subverted by sophisticated hackers. On Monday, SolarWinds confirmed that Orion -- its flagship network management software -- had served as the unwitting conduit for a sprawling international cyberespionage operation. The hackers inserted malicious code into Orion software updates pushed out to nearly 18,000 customers. [...] Cybersecurity experts across government and private industry are still struggling to understand the scope of the damage, which some are already calling one of the most consequential breaches in recent memory. [...] Experts are reviewing their notes to find old examples of substandard security at the company. Security researcher Vinoth Kumar told Reuters that, last year, he alerted the company that anyone could access SolarWinds' update server by using the password "solarwinds123" "This could have been done by any attacker, easily," Kumar said. Others -- including Kyle Hanslovan, the cofounder of Maryland-based cybersecurity company Huntress -- noticed that, even days after SolarWinds realized their software had been compromised, the malicious updates were still available for download.

Read more of this story at Slashdot.

AWS Introduces New Chaos Engineering as a Service Offering Slashdotby msmash on cloud at January 1, 1970, 1:00 am (cached at December 15, 2020, 11:12 pm)

When large companies like Netflix or Amazon want to test the resilience of their systems, they use chaos engineering tools designed to help them simulate worst-case scenarios and find potential issues before they even happen. Today at AWS re:Invent, Amazon CTO Werner Vogels introduced the company's Chaos Engineering as a Service offering called AWS Fault Injection Simulator. From a report: The name may lack a certain marketing panache, but Vogels said that the service is designed to help bring this capability to all companies. "We believe that chaos engineering is for everyone, not just shops running at Amazon or Netflix scale. And that's why today I'm excited to pre-announce a new service built to simplify the process of running chaos experiments in the cloud," Vogels said. As he explained, the goal of chaos engineering is to understand how your application responds to issues by injecting failures into your application, usually running these experiments against production systems. AWS Fault Injection Simulator offers a fully managed service to run these experiments on applications running on AWS hardware.

Read more of this story at Slashdot.

High-Frequency Traders Push Closer To Light Speed With Cutting-Edge Cables Slashdotby msmash on network at January 1, 1970, 1:00 am (cached at December 15, 2020, 9:53 pm)

High-frequency traders are using an experimental type of cable to speed up their systems by billionths of a second, the latest move in a technological arms race to execute stock trades as quickly as possible. From a report: The cable, called hollow-core fiber, is a next-generation version of the fiber-optic cable used to deliver broadband internet to homes and businesses. Made of glass, such cables carry data encoded as beams of light. But instead of being solid, hollow-core fiber is empty inside, with dozens of parallel, air-filled channels narrower than a human hair. Because light travels nearly 50% faster through air than glass, it takes about one-third less time to send data through hollow-core fiber than through the same length of standard fiber. The difference is often just a minuscule fraction of a second. But in high-frequency trading, that can make the difference between profits and losses. HFT firms use sophisticated algorithms and ultrafast data networks to execute rapid-fire trades in stocks, options and futures. Many are secretive about their trading strategies and technology. Hollow-core fiber is the latest in a series of advances that fast traders have used to try to outrace their competition. A decade ago, a company called Spread Networks spent about $300 million to lay fiber-optic cable in a straight line from Chicago to New York, so traders could send data back and forth along the route in just 13 milliseconds, or thousandths of a second. Within a few years the link was superseded by microwave networks that reduced transmission times along the route to less than nine milliseconds. HFT firms have also used lasers to zip data between the data centers of the New York Stock Exchange and Nasdaq, and they have embedded their algorithms in superfast computer chips. Now, faced with the limits of physics and technology, traders are left fighting over nanoseconds. "The time increments of these improvements have gotten markedly smaller," said Michael Persico, chief executive of Anova Financial Networks, a technology provider that runs communications networks used by HFT firms. High-frequency trading is controversial, with critics saying that some ultrafast strategies amount to an invisible tax on investors. Industry representatives say such criticism is unfounded.

Read more of this story at Slashdot.

[no title] Scripting News(cached at December 15, 2020, 9:18 pm)

It'll be just like a miracle.
FDA Authorizes 1st Home Coronavirus Test That Doesn't Require A Prescription Slashdotby msmash on medicine at January 1, 1970, 1:00 am (cached at December 15, 2020, 9:15 pm)

The U.S. Food and Drug Administration on Tuesday authorized the first coronavirus test that people will be able to buy at a local store without a prescription and use for immediate results at home to find out if they're positive or negative. From a report: The test will cost about $30 and be available by January, according to the Australian company that makes it, Ellume. The FDA had previously authorized other tests that let people avoid long lines by collecting a sample themselves at home. But those tests require people to send the sample to a lab and wait for the results. Another recently authorized test doesn't have to be sent off to a lab, but it requires a prescription to get it. The new test is the first that people will be able to buy without a prescription at a local store and do entirely at home on their own. It takes about five minutes to collect the sample and produces results within 15 minutes. "Today's authorization is a major milestone in diagnostic testing for COVID-19," FDA Commissioner Stephen Hahn said in a statement announcing the authorization.

Read more of this story at Slashdot.

Facebook To Move UK Users To California Terms, Avoiding EU Privacy Rules Slashdotby msmash on facebook at January 1, 1970, 1:00 am (cached at December 15, 2020, 8:57 pm)

Facebook will shift all its users in the United Kingdom into user agreements with the corporate headquarters in California, moving them out of their current relationship with Facebook's Irish unit and out of reach of Europe's privacy laws. From a report: The change takes effect next year and follows a similar move announced in February by Google here. Those companies and others have European head offices in Dublin, and the UK's exit from the EU will change its legal relationship with Ireland, which remains in the Union. Initially, sources briefed on the matter told Reuters about the move. Facebook later confirmed it. "Like other companies, Facebook has had to make changes to respond to Brexit and will be transferring legal responsibilities and obligations for UK users from Facebook Ireland to Facebook. There will be no change to the privacy controls or the services Facebook offers to people in the UK," the company's UK arm said.

Read more of this story at Slashdot.

[no title] Scripting News(cached at December 15, 2020, 8:47 pm)

I used to put Donald Trump's image in the right margin of this blog quite frequently, but I've stopped. He's a vampire we've managed to lock in a crypt, and I worry that just showing his image here might wake him up. He's now got the smell of loser on him, like an old version of Sarah Palin. She was pretty charismatic too, in her day. And about as talented as the lame duck. Better to let him fade away. Think of him as a dead relative. Maybe he was an asshole, it's hard to remember, it's been so long.
[no title] Scripting News(cached at December 15, 2020, 8:46 pm)

I'm watching Better Things very slowly, one episode a night on average. The nice thing is how the mom and her three daughters have open affection for each other, it's their baseline. They get pissed off, mostly the kids with the mom, but they quickly get back to hugging and being motherly to each other, across generations. It's sweet. Nothing at all even remotely like the environment I grew up in btw, just sayin. Anyway, I'd kind of like to see Donald Trump as a guest on the show. They would listen to his sad stories, and try to help him. I think there could be some good jokes in there.
SolarWinds Says 18,000 Customers Were Impacted by Recent Hack Slashdotby msmash on security at January 1, 1970, 1:00 am (cached at December 15, 2020, 8:16 pm)

IT software provider SolarWinds downplayed a recent security breach in documents filed with the US Securities and Exchange Commission on Monday. From a report: SolarWinds disclosed on Sunday that a nation-state hacker group breached its network and inserted malware in updates for Orion, a software application for IT inventory management and monitoring. Orion app versions 2019.4 through 2020.2.1, released between March 2020 and June 2020, were tainted with malware, SolarWinds said in a security advisory. The trojanized Orion update allowed attackers to deploy additional and highly stealthy malware on the networks of SolarWinds customers. But while initial news reports on Sunday suggested that all of SolarWinds' customers were impacted, in SEC documents filed today, SolarWinds said that of its 300,000 total customers, only 33,000 were using Orion, a software platform for IT inventory management and monitoring, and that fewer than 18,000 are believed to have installed the malware-laced update. The company said it notified all its 33,000 Orion customers on Sunday, even if they didn't install the trojanized Orion update, with information about the hack and mitigation steps they could take.

Read more of this story at Slashdot.

SolarWinds Says 18,000 Customers Were Impacted by Recent Hack Slashdotby msmash on security at January 1, 1970, 1:00 am (cached at December 15, 2020, 8:16 pm)

IT software provider SolarWinds downplayed a recent security breach in documents filed with the US Securities and Exchange Commission on Monday. From a report: SolarWinds disclosed on Sunday that a nation-state hacker group breached its network and inserted malware in updates for Orion, a software application for IT inventory management and monitoring. Orion app versions 2019.4 through 2020.2.1, released between March 2020 and June 2020, were tainted with malware, SolarWinds said in a security advisory. The trojanized Orion update allowed attackers to deploy additional and highly stealthy malware on the networks of SolarWinds customers. But while initial news reports on Sunday suggested that all of SolarWinds' customers were impacted, in SEC documents filed today, SolarWinds said that of its 300,000 total customers, only 33,000 were using Orion, a software platform for IT inventory management and monitoring, and that fewer than 18,000 are believed to have installed the malware-laced update. The company said it notified all its 33,000 Orion customers on Sunday, even if they didn't install the trojanized Orion update, with information about the hack and mitigation steps they could take.

Read more of this story at Slashdot.

A palm oil alternative could help save rainforests BBC News | Science/Nature | UK Edition(cached at December 15, 2020, 7:56 pm)

Plantations for palm oil are blamed for rainforest destruction, but an artificial palm oil is close.
FDA Approves Genetically Engineered Pigs Slashdotby msmash on science at January 1, 1970, 1:00 am (cached at December 15, 2020, 7:41 pm)

The Food and Drug Administration has approved genetically engineered pigs for use in food and medical products. The pigs, developed by medical company Revivicor, could be used in the production of drugs, to provide organs and tissues for transplants, and to produce meat that's safe to eat for people with meat allergies. From a report: "Today's first-ever approval of an animal biotechnology product for both food and as a potential source for biomedical use represents a tremendous milestone for scientific innovation," said FDA Commissioner Stephen M. Hahn in a press release. The pigs are called GalSafe pigs because they lack a molecule called alpha-gal sugar, which can trigger allergic reactions. Alpha-gal sugar is found in many mammals, but not usually in humans. Alpha-gal syndrome (AGS), which causes a serious meat allergy, can happen after a bite from a lone star or deer tick. Though it hasn't been tested specifically for people with AGS yet, the FDA has determined GalSafe pork products are safe for the general population to eat. In addition to their potential for safer consumption, there are several potential medical uses for GalSafe pigs. They could be used to make drugs like heparin, a common blood-thinner derived from animal tissue, safer for people with AGS.

Read more of this story at Slashdot.

[no title] Scripting News(cached at December 15, 2020, 7:01 pm)

The Dean campaign in 2003-04 was on the verge of turning a campaign into a social network. I was there. Here are my notes from the last night of the campaign, the Iowa Caucus in 2004. I was at Dean HQ in Burlington. I was blogging on Scripting News and on the main Dean weblog. We also rolled out Channel Dean that day, basically a linkblog managed by campaign people, linking to articles and blog posts their community would find interesting. These were all precursors to the social nets of today.
'Google is Getting Left Behind Due To Horrible UI/UX' Slashdotby msmash on google at January 1, 1970, 1:00 am (cached at December 15, 2020, 6:51 pm)

Daniel Miessler, a widely respected infosec professional in San Francisco, writes about design and user experience choices Google has made across its services in recent years: I've been writing for probably a decade about how bad Google's GUI is for Google Analytics, Google Apps, and countless of their other properties -- not to mention their multiple social media network attempts, like Google+ and Wave. Back then it was super annoying, but kind of ok. They're a hardcore engineering group, and their backend services are without equal. But lately it's just becoming too much. 1. Even Gmail is a cesspool at this point. Nobody would ever design a webmail interface like that, starting from scratch. 2. What happened to Google Docs? Why does it not look and behave more like Notion, or Quip, or any of the other alternatives that made progress in the last 5-10 years? 3. What college course do I take to manage a Google Analytics property? 4. Google just rolled out Google Analytics 4 -- I think -- and the internet is full of people asking the same question I am. "Is this a real rollout?" [...] My questions are simple: 1. How the hell is this possible? I get it 10 years ago. But then they came out with the new design language. Materialize, or whatever it was. Cool story, and cool visuals. But it's not about the graphics, it's about the experience. 2. How can you be sitting on billions of dollars and be unable to hire product managers that can create usable interfaces? 3. How can you run Gmail on an interface that's tangibly worse than anything else out there? 4. How can you let Google Docs get completely obsoleted by startups? I've heard people say that Google has become the new Microsoft, or the new Oracle, but damn -- at least Microsoft is innovating. At least Oracle has a sailing team, or whatever else they do. I'm being emotional at this point. Google, you are made out of money. Fix your fucking interfaces. Focus on the experience. Focus on simplicity. And use navigation language that's similar across your various properties, so that I'll know what to do whether I'm managing my Apps account, or my domains, or my Analytics. You guys are awesome at so many things. Make the commitment to fix how we interact with them.

Read more of this story at Slashdot.