Security

FBI Director: Guccifer Admitted He Lied About Hacking Hillary Clinton's Email (dailydot.com) 289

blottsie writes from a report via The Daily Dot: The Romanian hacker known as Guccifer (real name Marcel Lehel Lazar) admitted to the FBI that he lied to the public when he said he repeatedly hacked into Hillary Clinton's email server in 2013. FBI Director James Comey testified before members on Congress on Thursday that Guccifer never hacked into Clinton's servers and in fact admitted that he lied. Lazar told Fox News and NBC News in May 2016 about his alleged hacking. Despite offering no proof, the claim caused a huge stir, including making headline news on some of America's biggest publications, which offered little skepticism of his claims. "Can you confirm that Guccifer never gained access to her server?" asked Texas Republican Rep. Blake Farenthold. "He did not. He admitted that was a lie," Comey replied. Lazar is currently imprisoned in Alexandria, Virginia, following his extradition from Romania.
Databases

Baton Rouge Police Database Hacked In Retaliation For Killing of Alton Sterling (dailydot.com) 393

Patrick O'Neill quotes a report from The Daily Dot: Just days after the fatal shooting of a black man by Baton Rouge police prompted international outrage and a Justice Department investigation, the Baton Rouge city government's servers have been hacked and 50,000 city police records leaked including names, addresses, emails, and phone numbers. A hacker that goes by the name @ox2Taylor claimed responsibility for the breach, which was confirmed by security intelligence analyst at Patch Penguin, Jamie-Luke Woodruff. He told the Daily Dot that the administrators of the website had failed to implement proper security measures. When the hacker first announced the hack, he accompanied the tweet with three hashtags revealing the motivation: #AltonSterling, #Hacked, and #BlackLivesMatters. "The reason i did it is because of what that officer did to alton sterling," Taylor told the Daily Dot in a private message. "i'm sick of seeing police abuse their power and all the killings."
Democrats

DOJ Will Not File Charges Against Former Secretary of State Hillary Clinton (politico.com) 801

An anonymous reader writes: After FBI Director James Comey recommended not to indict Hillary Clinton for her email misconduct yesterday, U.S. Attorney General Loretta Lynch said on Wednesday that the Justice Department has decided not to pursue charges against Hillary Clinton or her aids and that the department will close the investigation into her use of a private email server during her tenure as secretary of state. "Late this afternoon, I met with FBI Director James Comey and career prosecutors and agents who conducted the investigation of Secretary Hillary Clinton's use of a personal email system during her time as Secretary of State," Lynch said in a statement on Wednesday. "I received and accepted their unanimous recommendation that the thorough, year-long investigation be closed and that no charges be brought against any individuals within the scope of the investigation."
Crime

Password Sharing Is a Federal Crime, Appeals Court Rules (vice.com) 165

An anonymous reader writes from a report via Motherboard: An appeals court ruled Wednesday that sharing passwords can be a violation of the Computer Fraud and Abuse Act, a catch-all "hacking" law that has been widely used to prosecute behavior that bears no resemblance to hacking. Motherboard reports: "In this particular instance, the conviction of David Nosal, a former employee of Korn/Ferry International research firm, was upheld by the Ninth Circuit Court of Appeals, who said that Nosal's use of a former coworker's password to access one of the firm's databases was an 'unauthorized' use of a computer system under the CFAA. In the majority opinion, Judge Margaret McKeown wrote that 'Nosal and various amici spin hypotheticals about the dire consequences of criminalizing password sharing. But these warnings miss the mark in this case. This appeal is not about password sharing.' She then went on to describe a thoroughly run-of-the-mill password sharing scenario -- her argument focuses on the idea that Nosal wasn't authorized by the company to access the database anymore, so he got a password from a friend -- that happens millions of times daily in the United States, leaving little doubt about the thrust of the case. The argument McKeown made is that the employee who shared the password with Nosal 'had no authority from Korn/Ferry to provide her password to former employees.' At issue is language in the CFAA that makes it illegal to access a computer system 'without authorization.' McKeown said that 'without authorization' is 'an unambiguous, non-technical term that, given its plain and ordinary meaning, means accessing a protected computer without permission.' The question that legal scholars, groups such as the Electronic Frontier Foundation, and dissenting judge Stephen Reinhardt ask is an important one: Authorization from who?"
Digital

Man Builds Giant Homemade Computer To Play Tetris (bbc.com) 127

An anonymous reader quotes a report from BBC: A man has finished building an enormous computer in the sitting room of his bungalow in Cambridge. James Newman started work on the "Megaprocessor," which is 33ft (10m) wide and 6ft (2m) high, in 2012. It does the job of a chip-sized microprocessor and Mr Newman has spent $53,000 creating it. It contains 40,000 transistors, 10,000 LED lights and it weighs around half a ton (500kg). So far, he has used it to play the classic video game Tetris. Mr Newman, a digital electronics engineer, started the project because he was learning about transistors and wanted to visualize how a microprocessor worked. The components all light up as the huge device carries out a task. Mr Newman hopes the Megaprocessor will be used as an educational tool and is planning a series of open days at his home over the summer. You can watch a video demonstration of the monstrosity here.
IOS

Apple To Encourage Organ Donation With Health App (cnet.com) 63

An anonymous reader writes: Apple announced today that its updated Health app, which will be available as part of iOS 10, will allow people to sign-up to be organ donors. The app will use its Medical ID feature, which has been used in the past to keep track of medical and health information, to include the ability to register as a donor of organs, eyes and tissues. The registrations will be forwarded to the National Donate Life Registry, an organization managed by Donate Life of America. All you need to do is tap the registration button in the Health app to volunteer as an organ donor. That adds your status as a donor to an "emergency information" screen that can appear even when the phone is locked. Tapping another button brings up information on organ donation. The demand for organs greatly exceeds the supply, as more than 120,000 Americans are currently waiting for a transplant -- every 10 minutes a new person is added to that waiting list, according to Apple. The feature is currently available for developers, but will be rolling out to the public in the public beta soon.
Programming

MIT's Swarm Chip Architecture Boosts Multi-Core CPUs, Offering Up To 18x Faster Processing (gizmag.com) 55

An anonymous reader writes from a report via Gizmag: MIT's new Swarm chip could help unleash the power of parallel processing for up to 75-fold speedups, while requiring programmers to write a fraction of the code that is usually necessary for programs to take full advantage of their hardware. Swarm is a 64-core chip developed by Prof. Daniel Sanchez and his team that includes specialized circuitry for both executing and prioritizing tasks in a simple and efficient manner. Neowin reports: "For example, when using multiple cores to process a task, one core might need to access a piece of data that's being used by another core. Developers usually need to write code to avoid these types of conflict, and direct how each part of the task should be processed and split up between the processor's cores. This almost never gets done with normal consumer software, hence the reason why Crysis isn't running better on your new 10-core Intel. Meanwhile, when such optimization does get done, mainly for industrial, scientific and research computers, it takes a lot of effort on the developer's side and efficiency gains may sometimes still be minimal." Swarm is able to take care of all of this, mostly through its hardware architecture and customizable profiles that can be written by developers in a fraction of the time needed for regular multi-core silicon. The 64-core version of Swarm came out on top after MIT researchers tested it out against some highly-optimized parallel processing algorithms, offering three to 18 times faster processing. The most impressive result was when Swarm achieved results 75 times better than the regular chips, because that particular algorithm had failed to be parallelized on classic multi-core processors. There's no indication as to when this technology will be available for consumer devices.
Google

Google Twists the Knife, Asks For Sanctions Against Oracle Attorney (arstechnica.com) 78

Google isn't done with its victory over Oracle. Court filings suggest that Google will be filing a motion for sanctions against Oracle and its law firm, Orrick, Sutcliffe & Herrington. The Mountain View-based company is apparently irked that Oracle attorney disclosed the financial agreements between Google and Apple. From an Ars Technica report: Speaking in open court, Oracle attorney Annette Hurst said that Google's Android operating system had generated revenue of $31 billion and $22 billion in profit. She also disclosed that Google pays Apple $1 billion to keep Google's search bar on iPhones. "Look at the extraordinary magnitude of commerciality here," Hurst told a magistrate judge as she discussed the revenue figures. The $1 billion figure comes from a revenue-split that gives Apple a portion of the money that Google makes off searches that originate on iPhones. The revenue share figure was 34 percent, "at one point in time," according to Hurst. Google lawyers asked for the figure to be struck from the record. "That percentage just stated, that should be sealed," Google lawyer Robert Van Nest said, according to a transcript of the hearing. "We are talking hypotheticals here. That's not a publicly known number."
Java

Oracle May Have Stopped Funding and Developing Java EE (arstechnica.com) 115

While anticipating new features in Java 9, developers also have other concerns, according to an anonymous Slashdot reader: ArsTechnica is reporting that Oracle has quietly pulled funding and development efforts away from Java EE, the server-side Java technology that is part of hundreds of thousands of Internet and business applications. Java EE even plays an integral role for many apps that aren't otherwise based on Java, and customers and partners have invested time and code. It wouldn't be the first time this has happened, but the implications are huge for Java as a platform.
"It's a dangerous game they're playing..." says one member of the Java Community Process Executive Committee. "It's amazing -- there's a company here that's making us miss Sun." Oracle's former Java evangelist even left the company in March and became a spokesman for the "Java EE Guardians," who have now created an online petition asking Oracle to "clarify" its intent and resume development or "transfer ownership of Java EE 8".
Google

Age-Discrimination Suit Against Google Seeks Class Action For Engineers (dailymail.co.uk) 144

An anonymous reader quotes the Daily Mail: A potential class action lawsuit that claims Google discriminated against people over 40 is one step closer to becoming a reality. A motion for conditional certification of collective action status was filed in a San Jose federal court Wednesday, which could open up a suit to anyone over 40 who feels they had been discriminated against by the tech company and not hired because of his or her age. The suit would include "all individuals who interviewed in-person for any software engineer, site reliability engineer, or systems engineer position with Google in the United States in the time period from August 13, 2010 through the present; were age 40 or older at the time of interview; and were refused employment by Google...."
We've discussed ageism before on Slashdot. Now dcblogs shares an article from Computerworld, which says the lawsuit alleges a "systematic pattern" of discrimination, citing the median age of Google's workforce as 29 (according to PayScale), while the median age for U.S. computer programmers is 43. "I think this is long overdue and potentially huge..." says Dan Lyons, who has complained about ageism during his time at HubSpot. "When it comes to age bias, the tech industry doesn't even bother to lie.... Everyone in Silicon Valley knows this and everyone just accepts it."
Communications

Facebook Messenger Now Has 11,000 Bots (theverge.com) 43

An anonymous reader writes: Three months after Facebook announced a platform for building bots that operate inside its Messenger app, Messenger chief David Marcus said in a blog post that more than 11,000 bots have been created. He also said 23,000 more developers have signed up to use tools provided by Wit.ai, a Facebook acquisition that automates conversational interactions between users and businesses. Facebook has yet to announce any numbers regarding how many users actually use the bots, but developers appear to be actively engaged. Facebook has said that bots will rapidly improve as more developers create them. Marcus did announce several new features for the platform. Bots can now respond with GIFs, audio, video, and other files "to help a brand's personality come across," Marcus said. They can now link Messenger profiles to customer accounts, such as a bank or online merchant. They're also getting some new UI elements: "quick replies" that suggest interactions for the user to help them set their expectations, and a "persistent menu" option for bots that displays available commands at all times so users don't have to remember them. A star system is now in place for users to rate bots and provide feedback directly to developers.
Slashdot also has a Facebook Messenger bot. You can chat with it by messaging the Slashdot Facebook page.
GNU is Not Unix

Slackware 14.2 Released, Still Systemd-Free (slackware.com) 179

sombragris writes: Slackware, the oldest GNU/Linux distribution still in active maintenance, was released just minutes ago. Slackware is noted for being the most Unix-like of all Linux distributions. While sporting kernel 4.4.14 and GCC 5.3, other goodies include Perl 5.22.2, Python 2.7.11, Ruby 2.2.5, Subversion 1.9.4, git-2.9.0, mercurial-3.8.2, KDE 4.14.21 (KDE 4.14.3 with kdelibs-4.14.21) Xfce 4.12.1... and no systemd!

According to the ChangeLog: "The long development cycle (the Linux community has lately been living in "interesting times," as they say) is finally behind us, and we're proud to announce the release of Slackware 14.2. The new release brings many updates and modern tools, has switched from udev to eudev (no systemd), and adds well over a hundred new packages to the system. Thanks to the team, the upstream developers, the dedicated Slackware community, and everyone else who pitched in to help make this release a reality." Grab the ISOs at a mirror near you. Enjoy!
The torrents page can be found here.
Oracle

Oracle Ordered To Pay $3B Damages To HP (bbc.com) 47

Oracle has been ordered to pay HP $3 billion in damages by a California jury over HP's claim that Oracle reneged on a deal to support HP computer servers running on Itanium chips from Intel. Oracle said it will appeal. BBC reports:The court battle over the contract was settled in 2012 but the damages HPE was due have only now been agreed. HP was split into two in 2015 with HPE taking over the running of its servers and services business. In court, HPE argued that although the 2012 legal judgement meant Oracle had resumed making software for the powerful chips, its business had suffered harm. It argued that Oracle took the decision in 2011 to stop supporting Itanium in a bid to get customers to move to hardware made by Sun -- a hardware firm owned by Oracle. Oracle said that its decision in 2011 was driven by a realisation that Itanium was coming to the end of its life. It also argued that the contract it signed never obliged it to keep producing software in perpetuity. Intel stopped making Itanium chips in late 2012 and many companies that used servers built around them have now moved to more powerful processors.
Programming

Ruby On Rails 5.0 Released (rubyonrails.org) 37

steveb3210 writes: Today, Ruby On Rails released version 5.0.0 of the platform. Major new features include ActionCable which brings support for WebSockets and a slimmed-down API-only mode From the official blog post:After six months of polish, four betas, and two release candidates, Rails 5.0 is finally done! It's taken hundreds of contributors and thousands of commits to get here, but what a destination: Rails 5.0 is without a doubt the best, most complete version of Rails yet. It's incredible that this community is still going so strong after so long. Thanks to everyone who helped get us here. [...] Note: As per our maintenance policy, the release of Rails 5.0 will mean that bug fixes will only apply to 5.0.x, regular security issues to 5.0.x and 4.2.x, and severe security issues also to 5.0.x and 4.2.x (but when 5.1 drops, to 5.1.x, 5.0.x, and 4.2.x). This means 4.1.x and below will essentially be unsupported! Ruby 2.2.2+ is now also the only supported version of Rails 5.0+.
Government

Congressman Wants Ransomware Attacks To Trigger Breach Notifications (onthewire.io) 73

Trailrunner7 quotes a report from On the Wire: A powerful California congressman is pushing the federal government to treat ransomware attacks on medical facilities as data breaches and require notifications of patients. The pressure is coming from Rep. Ted Lieu (D-Calif.) and follows comments from officials at the Department of Health and Human Services about the department's plan to issue guidance to health care organizations about ransomware attacks. The Office for Civil Rights section of HHS, which has responsibility for health information privacy, will provide guidance on how to handle ransomware attacks, and Lieu is eager to ensure that the guidance specifically addresses how ransomware attacks relate to data breach regulations. "I welcome the news of HHS providing guidance to health providers on a matter that threatens so many hospital IT systems. However, we need to make clear that ransomware is not the same as conventional breaches. The threat to patients from ransomware is typically due to the denial of access to their medical records and medical services. Not only could this be a threat to privacy, but it could result in medical complications and deaths if hospitals can't access patient information," Lieu said in a statement. He sent a letter to the deputy director for health information privacy in the Office of Civil Rights at HHS, Deven McGraw, asking him to instruct health organizations and providers to notify patients of an attack if it results in a denial of access to a medical record or a loss of functionality thats necessary to provide patient care. In the past, Lieu has called for a full congressional investigation into the aforementioned widespread flaw in global phone networks that allows hackers to track anyone's location and spy on their phone calls and text messages. He was also one of the first lawmakers to publicly express his pro-encryption view after a federal judge ordered Apple to help the FBI break into the San Bernardino shooter's iPhone, saying it effectively "forces private-sector companies like Apple to be used as an arm of law enforcement."
Databases

2 Million-Person Terror Database Leaked Online (thestack.com) 165

An anonymous reader writes from a report via The Stack: A 2014 version of the World-Check database containing more than 2.2 million records of people with suspected terrorist, organized crime, and corruption links has been leaked online. The World-Check database is administered by Thomson-Reuters and is used by 4,500 institutions, 49 of the world's 50 largest banks and by over 300 government and intelligence agencies. The unregulated database is intended for use as "an early warning system for hidden risk" and combines records from hundreds of terror and crime suspects and watch-lists into a searchable resource. Most of the individuals in the database are unlikely to know that they are included, even though it may have a negative impact on their ability to use banking services and operate a business. A Reddit user named Chris Vickery says he obtained a copy of the database, saying he won't reveal how until "a later time." To access the database, customers must pay an annual subscription charge, that can reach up to $1 million, according to Vice, with potential subscribers then vetted before approval. Vickery says he understands that the "original location of the leak is still exposed to the public internet" and that "Thomas Reuters is working feverishly to get it secured." He told The Register that he alerted the company to the leak, but is still considering whether to publish the information contained in it.
Businesses

DMCA Notices Remove 8,268 Projects On Github In 2015 (torrentfreak.com) 116

An anonymous reader writes: Github's transparency report for 2015 shows that the site received many DMCA notices that removed more than 8,200 projects. "In 2015, we received significantly more takedown notices, and took down significantly more content, than we did in 2014," Github reports. For comparison, the company received only 258 DMCA notices in 2014, 17 of which responded with a counter-notice or retraction. In 2015, they received 505 takedown notices, 62 of which were the subject of counters or withdrawals. TorrentFreak reports: "Copyright holders are not limited to reporting one URL or location per DMCA notice. In fact, each notice filed can target tens, hundreds, or even thousands of allegedly infringing locations." September was a particularly active month as it took down nearly 5,834 projects. "Usually, the DMCA reports we receive are from people or organizations reporting a single potentially infringing repository. However, every now and then we receive a single notice asking us to take down many repositories," Github explains. They are called 'Mass Removals' when more than 100 repositories are asked to be removed. "In all, fewer than twenty individual notice senders requested removal of over 90% of the content GitHub took down in 2015."
Businesses

Clinton Tech Plan Reads Like Silicon Valley Wish List (usatoday.com) 355

theodp writes from a report via USA Today: "If there was any lingering doubt as to tech's favored presidential candidate," writes USA Today's Jon Swartz, "Hillary Clinton put an end to that Tuesday with a tech plan that reads like a Silicon Valley wish list. It calls for connecting every U.S. household to high-speed internet by 2020, reducing regulatory barriers and supporting Net neutrality rules, [which ban internet providers from blocking or slowing content.] It proposes investments in computer science and engineering education ("engage the private sector and nonprofits to train up to 50,000 computer science teachers in the next decade"), expansion of 5G mobile data, making inexpensive Wi-Fi available at more airports and train stations, and attaching a green card to the diplomas of foreign-born students earning STEM degrees." dcblogs shares with us a report from Computerworld that specifically discusses Clinton's support of green cards for foreign students who earn STEM degrees: As president, Hillary Clinton will support automatic green cards, or permanent residency, for foreign students who earn advanced STEM degrees. Clinton, the presumptive Democratic presidential candidate, wants the U.S. to "staple" green cards on the diplomas of STEM (science, technology, engineering, math) masters and PhD graduates "from accredited institutions." Clinton outlined her plan in a broader tech policy agenda released today. Clinton's "staple" idea isn't new. It's what Mitt Romney, the GOP presidential candidate in 2012, supported. It has had bipartisan support in Congress. But the staple idea is controversial. Critics will say this provision will be hard to control, will foster age discrimination, and put pressure on IT wages.
AI

AI Downs 'Top Gun' Pilot In Dogfights (dailymail.co.uk) 441

schwit1 writes from a report via Daily Mail: [Daily Mail reports:] "The Artificial intelligence (AI) developed by a University of Cincinnati doctoral graduate was recently assessed by retired USAF Colonel Gene Lee -- who holds extensive aerial combat experience as an instructor and Air Battle Manager with considerable fighter aircraft expertise. He took on the software in a simulator. Lee was not able to score a kill after repeated attempts. He was shot out of the air every time during protracted engagements, and according to Lee, is 'the most aggressive, responsive, dynamic and credible AI I've seen to date.'" And why is the US still throwing money at the F35, unless it can be flown without pilots. The AI, dubbed ALPHA, features a genetic fuzzy tree decision-making system, which is a subtype of fuzzy logic algorithms. The system breaks larger tasks into smaller tasks, which include high-level tactics, firing, evasion, and defensiveness. It can calculate the best maneuvers in various, changing environments over 250 times faster than its human opponent can blink. Lee says, "I was surprised at how aware and reactive it was. It seemed to be aware of my intentions and reacting instantly to my changes in flight and my missile deployment. It knew how to defeat the shot I was taking. It moved instantly between defensive and offensive actions as needed."
Earth

Google's Satellite Map Gets a 700-Trillion-Pixel Makeover (theatlantic.com) 70

An anonymous reader writes: On Monday, Google Maps has received a makeover with 700 trillion pixels of new data added to the service. The Atlantic reports: "The new map, which activates this week for all users of Google Maps and Google Earth, consists of orbital imagery that is newer, more detailed, and of higher contrast than the previous version. Most importantly, this new map contains fewer clouds than before -- only the second time Google has unveiled a "cloudless" map. Google had not updated its low- and medium- resolution satellite map in three years. The new version of the map includes data from Landsat 8, the newer version of the same satellite (Landsat 7, the U.S. government satellite which supplied the older map's imagery data), letting Google clear the ugly artifacts. Google's new update doesn't include imagery at the highest zoom levels, like the kind needed to closely inspect an individual house, pool, or baseball field. Those pictures do not come from Landsat at all, but from a mix of other public and private aerial and space-based cameras, including DigitalGlobe's high-resolution satellites. The image processing for this most recent map was completed entirely in Google Earth Engine, the company's geospatial-focused cloud infrastructure. In fact, the entire algorithm to create the cloudless map was written in Javascript in the Earth Engine development interface."

Slashdot Top Deals