Shared posts

01 Jun 03:40

Embrace software security architecture to beat WannaCry-era hackers

Jeffrey J. Bloom

There's no such thing as perfect security or an environment that cannot be compromised, but the architectural approach can be highly effective in preventing & detecting these attacks," said Temske. In this interview, he surveys the challenges in secure application development & gives advice on prioritizing modern security strategies, creating an enterprise software security architecture, using security frameworks like CIS & choosing security tools.
http://searchcloudapplications.techtarget.com/feature/Embrace-software-security-architecture-to-beat-WannaCry-era-hackers

Hacking has changed from a hobby to a business, motivated by financial gain. ... Temske: Hackers are leveraging social networks, like Facebook and ...
01 Jun 03:34

Paul Allen rolls out world's largest airplane...

Jeffrey J. Bloom

Paul Allen’s monstrous Stratolaunch airplane finally rolled out of its hangar in Mojave, Calif., Wednesday, showing off its complete twin-hulled majesty for the first time. Intended to carry a rocket slung between the two fuselages, & release it at 35,000 feet. The concept is that the rocket will then launch into space & deliver satellites into orbit.
http://www.seattletimes.com/business/boeing-aerospace/allens-colossal-stratolaunch-plane-emerges-from-its-lair/


Paul Allen rolls out world's largest airplane...


(First column, 1st story, link)


01 Jun 03:30

Telstra to offer quantum computing 'as a service'

Jeffrey J. Bloom

"[There are] a whole lot of applications of quantum computers which our customers are going to want to use & I can assure you they're not going to walk in on day one & know how to use these things so we want to be able to offer it as a service to them whereby they can use it to run their applications." "The potential that quantum computing will be available via cloud networks & other forms of broadband infrastructure invites the possibility that clusters of programmers & users in all parts of Australia will be able to access this technology."
https://www.computerworld.com.au/article/620063/telstra-offer-quantum-computing-as-a-service/

"[There are] a whole lot of applications of quantum computers which our customers are going to want to use. And I can assure you they're not going to ...
01 Jun 03:26

Dex-Net 2.0 robot uses deep-learning to grasp objects

Jeffrey J. Bloom

The Dex-Net 2.0 bot can pick up awkward & unusually shaped objects, learning how to grasp objects by studying a virtual library of 10,000 3D objects. Its deep-learning system figures out what grasp it should use for each object, leading to bots that can be useful in settings such as hospitals & homes.
http://www.dailymail.co.uk/sciencetech/article-4560514/Nimble-robot-uses-deep-learning-grasp-different-objects.html

Advances in control algorithms, machine-learning approaches and ... machine-learning with traditional approaches involving reasoning over the ...
01 Jun 03:23

DRONE DELIVERS DOUGHNUTS...

Jeffrey J. Bloom

"We're doing it completely legal, we have very, very short deliveries from the drone where we have a safe takeoff location and the landing area is a Drone Dispatch team member who's receiving the box of doughnuts," said Chris Bonnet, CEO of Drone Dispatch.
http://hosted.ap.org/dynamic/stories/U/US_DENVER_DRONE_DOUGHNUTS

01 Jun 03:19

AI will outperform humans in all tasks in just 45 years

Jeffrey J. Bloom

Researchers surveyed 352 machine learning experts (forecasting AI progress found there’s a 50% chance AI will outperform humans in all tasks in 45 years & a 50% chance machines will take ALL jobs in 120 years. AI will outperform humans at translation, truck driving & essay writing in 10 yrs.
http://www.dailymail.co.uk/~/article-4560824/index.html

In less than 50 years, artificial intelligence will be able to beat humans at all of their own tasks, according to a new study. And, the first hints of this shift ...
01 Jun 03:08

As ransomware attacks continue, so do NSA's problems: opinion

Researchers say it takes advantage of a stolen NSA tool to exploit a flaw in some versions of Windows Microsoft Corp has suggested that the NSA ...
01 Jun 03:03

EFF Sues FBI For Records About Paid Best Buy Geek Squad Informants

by BeauHD
Jeffrey J. Bloom

The Electronic Frontier Foundation is suing the FBI for records "about the extent to which it directs and trains Best Buy employees to conduct warrantless searches of people's devices." The lawsuit stems around an incident in 2011 where a gynecology doctor took his computer for repairs at Best Buy's Geek Squad. The repair technician was a paid FBI informant that found child pornography on the doctor's computer, ultimately resulting in the doctor being charged with possessing child pornography.
https://www.eff.org/deeplinks/2017/02/FBI-tries-to-bypass-Fourth-Amendment-Safeguards-by-using-Geek-Squad

The Electronic Frontier Foundation is suing the FBI for records "about the extent to which it directs and trains Best Buy employees to conduct warrantless searches of people's devices." The lawsuit stems around an incident in 2011 where a gynecology doctor took his computer for repairs at Best Buy's Geek Squad. The repair technician was a paid FBI informant that found child pornography on the doctor's computer, ultimately resulting in the doctor being charged with possessing child pornography. From the EFF's report: A federal prosecution of a doctor in California revealed that the FBI has been working for several years to cultivate informants in Best Buy's national repair facility in Brooks, Kentucky, including reportedly paying eight Geek Squad employees as informants. According to court records in the prosecution of the doctor, Mark Rettenmaier, the scheme would work as follows: Customers with computer problems would take their devices to the Geek Squad for repair. Once Geek Squad employees had the devices, they would surreptitiously search the unallocated storage space on the devices for evidence of suspected child porn images and then report any hits to the FBI for criminal prosecution. Court records show that some Geek Squad employees received $500 or $1,000 payments from the FBI. At no point did the FBI get warrants based on probable cause before Geek Squad informants conducted these searches. Nor are these cases the result of Best Buy employees happening across potential illegal content on a device and alerting authorities. Rather, the FBI was apparently directing Geek Squad workers to conduct fishing expeditions on people's devices to find evidence of criminal activity. Prosecutors would later argue, as they did in Rettenmaier's case, that because private Geek Squad personnel conducted the searches, there was no Fourth Amendment violation. The judge in Rettenmaier's case appeared to agree with prosecutors, ruling earlier this month that because the doctor consented both orally and in writing to the Geek Squad's search of his device, their search did not amount to a Fourth Amendment violation. The court, however, threw out other evidence against Rettenmaier after ruling that FBI agents misstated key facts in the application for a warrant to search his home and smartphone. We disagree with the court's ruling that Rettenmaier consented to a de-facto government search of his devices when he sought Best Buy's help to repair his computer. But the court's ruling demonstrates that law enforcement agents are potentially exploiting legal ambiguity about when private searches become government action that appears intentionally designed to try to avoid the Fourth Amendment.

Share on Google+

Read more of this story at Slashdot.

01 Jun 02:59

NATO Could Go To War Over A Cyber Attack

Jeffrey J. Bloom

A persistent & devastating attack could trigger Article 5 (NATO’s collective defense measure), theoretically causing allys to go to war in defense of a member state. The attack would have to be much more dangerous than propaganda or social media activities, but invoking Article 5 is still a "real possibility."
http://dailycaller.com/2017/05/31/nato-could-go-to-war-over-a-cyber-attack/

Russian cyber attacks have been a chief concern in recent months, specifically regarding potential meddling in the U.S. presidential election last year.
01 Jun 02:51

Hackers Can Get Into Your Baby Monitor

Jeffrey J. Bloom

Make sure your wifi is password protected and choose something complex with capital letters, numbers and symbols. This will help to make sure hackers can't guess what it is.

Hackers Can Get Into Your Baby Monitor ... But cyber security experts say baby monitors can be hacked, and there is no telling what that person will ...
31 May 12:15

High River charity outwits hackers who held website for ransom

Jeffrey J. Bloom

"Sometimes you just do what you have to do," "A website is only as good as how current it is." Fortunately, they had backed up the night before. "There is nothing that is linked through our files, our server or website that would ever link to a woman's information," "Safety & privacy are our top priorities."
http://www.calgarysun.com/2017/05/30/high-river-charity-outwits-hackers-who-held-website-hostage-for-ransom

High River charity outwits hackers who held website for ransom ... survivors, has launched a brand new website after being hacked two months ago. ... A High River charity thwarted an attempted hacking attack by doing the last thing ...
31 May 11:53

AI Could Get Smarter By Copying the Neural Structure of a Rat Brain

Jeffrey J. Bloom

AI systems are artificial neural networks, bearing the roughest resemblance to biological networks of neurons. A $100M program from IARPA is funding mapping of the rodent visual cortex, or 1 cubic millimeter of brain, to understand how neural circuits are activated to process information.
http://spectrum.ieee.org/biomedical/imaging/ai-designers-find-inspiration-in-rat-brains

"Sounds promising but do we really need an AI that takes in garbage, hides in the darkest cramped spaces, efficiently distributes viruses, and is a plague to humankind?" 😂
https://science.slashdot.org/story/17/05/30/2118223/ai-could-get-smarter-by-copying-the-neural-structure-of-a-rat-brain#comments

C Elegans is am extensively studied nematode with exactly 302 neurons, whose contetome (wiring) is consistent & known. It's brain function remains a mystery. Neurons are complex, as is their input & output..

Since 2011, OpenWorm seeks to completely simulate nematode worm (Caenorhabditis Elegans) muscles & neuron electrical activity at a cellular-level. Although the worm connectome was mapped in the 1980s, the neural network has never been fully simulated in a biologically realistic way. The philosophy of the project is that only by recreating a living organism can we truly understand it.
http://www.artificialbrains.com/openworm

the_newsbeagle writes: Many of today's fanciest artificial intelligence systems are some type of artificial neural network, but they bear only the ...
31 May 04:18

Over 8000 bugs found in pacemaker codes, leaving them vulnerable to hackers

Jeffrey J. Bloom

Doctors didn't need to authenticate themselves when logging onto the pacemaker programmers. So, anyone could log on & tamper with the programmer without the doctor knowing, which in turn might affect how the programmer might behave when it was next used on a pacemaker.
https://www.neowin.net/news/over-8000-bugs-found-in-pacemaker-codes-leaving-them-vulnerable-to-hackers

WhiteScope, an independent provider of cyber security services and training, has just released research that shows that pacemaker programmers, ...
31 May 04:13

Ransomware and the NSA

Jeffrey J. Bloom

Researchers say latest attack--still evolving--takes advantage of a stolen NSA tool to exploit a flaw in some versions of Windows. Microsoft has suggested that the NSA knew of the flaw for some time, yet didn’t disclose it until the theft.
*A better approach is to improve the current system; secrecy makes it hard to know how well the stated criteria for retaining vulnerabilities are being followed. Reporting the total number found & disclosed each year might offer some reassurance to tech companies & the public, without divulging anything sensitive.
https://www.bloomberg.com/view/articles/2017-05-30/ransomware-and-the-nsa

Researchers say it takes advantage of a stolen NSA tool to exploit a flaw in some versions of Windows. Microsoft Corp. has suggested that the NSA ...
31 May 04:00

John P. Carlin: Economic Espionage & Weaponized Information

Jeffrey J. Bloom

Former Assistant AG for DoJ’s Nat'l Security Division described how nation state actors exfiltrated data from American companies, costing hundreds of billions of dollars in losses & over two million jobs. Reminding how important it is to work with the government while taking us down memory lane with the Sony hack. Explaining how destructive an attack can be, by using soft targets, such as email, not requiring sophisticated techniques.
https://blog.varonis.com/john-carlin-economic-espionage-weaponized-information-part-2/

In part two of our series, John Carlin shared with us lessons on economic espionage and weaponized information. As former Assistant Attorney ...
31 May 03:53

FTC: Cybercriminals find stolen personal data within 9 minutes of hackers posting it

Jeffrey J. Bloom

Releasing data of roughly 100 fake consumers, including names, addresses, email, phone & payment info,on two different occasions, "criminals were quick to pounce[...]After the second posting, it took only nine minutes before crooks tried to access the information." Identifying over 1,200 attempts to access fake email & payment accounts. Attempts to use fake credit cards to pay for a range of activities, including clothing, games & online dating memberships.
http://www.beckershospitalreview.com/healthcare-information-technology/ftc-cybercriminals-find-stolen-personal-data-within-9-minutes-of-hackers-posting-it.html

On two different occasions, the researchers posted the data on a website hackers and other cybercriminals use to release stolen credentials.
31 May 03:47

Virginia outranks other states 'NSA Day of Cyber' participation nationwide

Jeffrey J. Bloom

Spanning five months--October to March--it aimed to excite students about professions in cybersecurity & related operations. Virginia garnered the highest participation rates nationwide with nearly 7,000 students in 110 schools spending a day in the life of six NSA experts, including a data scientist, an intelligence analyst & a cyber-linguist.
http://edscoop.com/virginia-leads-in-nsa-day-of-cyber-participation-nationwide

"NSA Day of Cyber" is a self-guided website that allows students to carry out the ... Terry McAuliffe announced the winners of the “NSA Day of Cyber” ...
31 May 03:43

Congress Fast-Tracks Bill That Would Give DHS Agencies Access To NSA Collections

Jeffrey J. Bloom

Collected communications CAN be masked to protect identified US persons, but made on a case-by-case basis by NSA & government officials..
*DHS already has access to NSA collections & this bill would grant underling agencies access. Including CBP, ICE & TSA. NSA's collections serve a national security purpose, the FBI uses access for standard criminal investigations. There's no reason to believe these agencies won't do the same.
https://www.techdirt.com/articles/20170527/08075437463/congress-fast-tracks-bill-that-would-give-dhs-agencies-access-to-nsa-collections.shtml

As a parting gift to the incoming president, Barack Obama approved information-sharing rules which gave sixteen federal agencies access to ...
31 May 03:36

Snowden Says Democracy Under Threat by Attacks on 'Fake News'

Jeffrey J. Bloom

"The costs of autocracy is illegitimacy, & though none of us have wished for this, it is increasingly near," Snowden told the Estoril Conferences, "Elevating criminals like this is the laziest kind of rhetoric, terrorists for all their evil, are incapable of destroying our rights, or diminishing our societies. They lack the strength (to destroy rights), only we can do that, through unthinking, reflexive fear," "Rights are lost by cowardly laws that are passed in moments of panic, rights are lost to the cringing complicity of leaders who fear the loss of their office more than the loss of our liberty."
https://www.usnews.com/news/world/articles/2017-05-30/snowden-says-democracy-under-threat-by-attacks-on-fake-news

Edward Snowden speaks via video link during the Estoril Conferences - Global Challenges, Local Answers in Estoril, Portugal May 30, 2017.
31 May 03:30

Fancy Bear US Election Hackers Doctored Leaked Documents

Jeffrey J. Bloom

As to whether the information leaked from the DNC had been doctored, no analysis has been applied to it so far. But this kind of tampering is likely to become more widespread.
"Tainted leaks are the next frontier of disinformation: an attempt to really tamper with the integrity of large sets of information that people will believe to be genuine," John Scott-Railton, researcher at Citizen Lab, told Forbes.
https://www.infosecurity-magazine.com/news/fancy-bear-us-election-hackers/

The Russian hackers behind the break-in at the Democratic National ... Satter's emails were stolen and later published on the CyberBerkut hacking ...
31 May 03:25

The Shadow Brokers reveal new details about their subscription plan for NSA exploits

Jeffrey J. Bloom

Interested buyers must send 100 units of Zcash cryptocurrency, with no guarantee it's 100% safe/reliable. The monthly subscription service probably isn’t for anyone worried about losing "$20k+ Euro."
Only noting the next data dump is something of "value to someone," & the 100 Zcash price will increase in the future.
*"Monthly dump is being for high rollers, hackers, security companies, OEMs & governments[...] Playing ‘the game’ is involving risks. Zcash is having connections to USG (DARPA, DOD, John Hopkins) & Israel.”
http://bgr.com/2017/05/30/shadow-brokers-nsa-exploits-subscription/

... a hacking collective known as the Shadow Brokers released a treasure trove of NSA hacking tools. ... “Monthly dump is being for high rollers, hackers, security companies, OEMs, and governments,” the message reads in part.
31 May 02:52

Want access to the Shadow Brokers' stolen hacking tools? There's a Patreon for that.

Jeffrey J. Bloom

Researchers behind the Patreon campaign, Hacker Fantastic & x0rz, hope that by purchasing the data they will be able to analyze it & possibly prevent another attack like the WannaCry ransomware.

It's quite the dilemma: A nefarious group of hackers plans to sell a cache of stolen National Security Agency exploits, but you can't quite come up with ...
31 May 02:49

Tech pro cautions on attribution of cyber attacks

Jeffrey J. Bloom

*Symantec & Kaspersky blame WannaCry on North Korea. SecureWorks & TrendMicro blame DNC hacks on Russia.
*Attributing cyber attacks to any country or hacker should conducted with utmost caution. Where's the proof? emails, communications, trusted witnesses to testify under oath & the like? Nothing definitive has emerged to blame anyone for the attacks. Brandon Swafford's Forcepoint role revolves around human elements of data protection, hunting malicious users & understanding human behaviour leading to data breaches.
*The US DOJ indicted 5 people from China's PLA in 2014 & earlier this year, 2 Russian FSB officers along with 2 other hackers.
https://www.itwire.com/security/78345-tech-pro-cautions-on-attribution-of-cyber-attacks.html

And the article disappeared! Try google cache:
https://webcache.googleusercontent.com/search?q=cache:OKPScMMfm7EJ:https://www.itwire.com/security/78345-tech-pro-cautions-on-attribution-of-cyber-attacks.html

Anyone attributing cyber attacks to Russia or any other country or hacker group should proceed with the utmost caution, the chief technology officer of ...
31 May 02:13

MIT Just Unveiled A Technique to Mass Produce Quantum Computers

Jeffrey J. Bloom

A simpler method precisely & perfectly places atomic-scale defects in diamond material to function as qubits. This could allow mass production of quantum computers & upend modern encryption; allow solving "unsolvable" problems; and shatter information storage & transmission limitations!
https://futurism.com/mit-just-unveiled-a-technique-to-mass-produce-quantum-computers/

Quantum computing is, if you are not already familiar, simply put, a type of computation that uses qubits to encode data instead of the traditional bit (1s ...
30 May 11:42

NVIDIA (NVDA) Partners ODMs to Boost AI Cloud Computing

Jeffrey J. Bloom

“Using HGX, ODM partners can work with NVIDIA to more quickly design and bring to market a wide range of qualified GPU-accelerated systems for hyperscale data centers. Through the program, NVIDIA engineers will work closely with ODMs to help minimize the amount of time from design win to production deployments.’’
https://www.zacks.com/stock/news/262235/nvidia-nvda-partners-odms-to-boost-ai-cloud-computing

Delving deeper into the booming artificial intelligence (AI) space, NVIDIA Corporation (NVDA - Free Report) recently partnered with Foxconn, Inventec, ...
30 May 11:42

Nvidia Announces Partnership To Accelerate Machine Learning-Optimized Server Deployment

Jeffrey J. Bloom

"Accelerated computing is evolving rapidly--tripling deep learning performance in our Tesla GPUs in one year---& this is having a significant impact on the way systems are designed," “Through our HGX partner program, device makers can ensure they’re offering the latest AI technologies to the growing community of cloud computing providers."
http://www.tomshardware.com/news/nvidia-top-manufacturers-hgx-1-partnership,34544.html

The companies optimized the enclosure for machine learning applications and open-sourced its design earlier this year. The HGX-1 boxes support up ...
30 May 11:33

This Finnish startup is using artificial intelligence to create a Youtube for podcasts

Jeffrey J. Bloom

Kieku listening service will provide all-you-can-eat brain food & podcasts.
"Finding meaningful audio is time-consuming & complicated.” There's about 30,000,000 minutes of podcasting every year, that's almost 3,500 every hour!
http://nordic.businessinsider.com/this-finnish-startup-is-using-artificial-intelligence-to-create-a-youtube-for-podcasts-2017-5/

The service, currently available both online and as an iOS app, uses machine learning to create a custom-made feed of audio content for users.
30 May 03:31

Startup Uses AI To Create Programs From Simple Screenshots

Jeffrey J. Bloom

Using cutting-edge machine learning, Danish startup UIzard Tech IVS, is creating a neural net that can generate code automatically using GUI screenshots. The Pix2Code model actually outperforms many human coders because it can create code for 3 platforms--Android, iOS & web-based--with an accuracy of 77%, & improves as the algorithm learns more. https://siliconangle.com/blog/2017/05/28/startup-uses-ai-create-gui-source-code-simple-screenshots/

An anonymous reader shares an article: A new neural network being built by a Danish startup called UIzard Technologies IVS has created an ...
30 May 03:22

ARM releases new chip designs aimed at AI, machine learning

Jeffrey J. Bloom

the Cortex-A75 & A55 designs use DynamIQ technology, allowing them to be clustered with as many as 8 processors. Promising 20% & 15% better performance than earlier models (respectively), faster single instruction multiple data (SIMD) & floating point units, making it suitable for machine learning applications.
http://www.itnews.com.au/news/arm-releases-new-chip-designs-aimed-at-ai-machine-learning-463509

Softbank-owned silicon designer ARM has released two new mobile processor variants targeting artificial intelligence and machine learning as well ...
30 May 03:14

Wikipedia's Switch To HTTPS Has Successfully Fought Government Censorship

by msmash
Jeffrey J. Bloom

Harvard researchers deployed an algorithm to detected unusual changes in Wikipedia's global server traffic beginning in May 2015. This data was combined with historical analysis of daily request histories for 1.7 million articles in 286 different languages from 2011 to 2016 to determine possible censorship events. [...] they found that, globally, Wikipedia's switch to HTTPS had a positive effect on the number censorship events by comparing server traffic from before & after the switch in June of 2015.
https://motherboard.vice.com/en_us/article/wikipedias-switch-to-https-has-successfully-fought-government-censorship

Determining how to prevent acts of censorship has long been a priority for the non-profit Wikimedia Foundation, and thanks to new research from the Harvard Center for Internet and Society, the foundation seems to have found a solution: encryption. From a report: HTTPS prevents governments and others from seeing the specific page users are visiting. For example, a government could tell that a user is browsing Wikipedia, but couldn't tell that the user is specifically reading the page about Tiananmen Square. Up until 2015, Wikipedia offered its service using both HTTP and HTTPS, which meant that when countries like Pakistan or Iran blocked the certain articles on the HTTP version of Wikipedia, the full version would still be available using HTTPS. But in June 2015, Wikipedia decided to axe HTTP access and only offer access to its site with HTTPS. [...] The Harvard researchers began by deploying an algorithm which detected unusual changes in Wikipedia's global server traffic for a year beginning in May 2015. This data was then combined with a historical analysis of the daily request histories for some 1.7 million articles in 286 different languages from 2011 to 2016 in order to determine possible censorship events. [...] After a painstakingly long process of manual analysis of potential censorship events, the researchers found that, globally, Wikipedia's switch to HTTPS had a positive effect on the number censorship events by comparing server traffic from before and after the switch in June of 2015.

Share on Google+

Read more of this story at Slashdot.