Tikkie: IBAN-numbers users exposed (Dutch)

De populaire betaal-app Tikkie biedt de mogelijkheid om geld over te boeken naar andere Tikkie-gebruikers op basis van hun 06-nummer. Daardoor was het mogelijk om de IBAN-nummers van vele nietsvermoedende Tikkie-gebruikers te achterhalen, met het gevaar voor identiteitsfraude en phishing. Dat blijkt uit onderzoek van RTL Nieuws. ABN Amro bevestigt de kwetsbaarheid en heeft de Read more about Tikkie: IBAN-numbers users exposed (Dutch)[…]

Smartians – turn old tech things into smart things by pushing, pulling, prodding and turning: looking for funding

Why replace your things just because they’re not state-of-the-art? Smartians are cloud-connected motors that breathe new life into the things around you. <iframe src=”https://player.vimeo.com/video/294150597″ width=”640″ height=”360″ frameborder=”0″ allowfullscreen></iframe> Very clever, I hope they get funded!   Source: Smartians | FROLIC studio |

Heads up: Debian’s package manager is APT for root-level malware injection… Fix out now to thwart MITM hijacks

The Debian Project has patched a security flaw in its software manager Apt that can be exploited by network snoops to execute commands as root on victims’ boxes as they update or install packages. The Linux distro’s curators have pushed out an fix to address CVE-2019-3462, a vulnerability uncovered and reported by researcher Max Justicz. Read more about Heads up: Debian’s package manager is APT for root-level malware injection… Fix out now to thwart MITM hijacks[…]

Wow, fancy that. Web ad giant Google to block ad-blockers in Chrome. For safety, apparently

Google engineers have proposed changes to the open-source Chromium browser that will break content-blocking extensions, including various ad blockers. Adblock Plus will most likely not be affected, though similar third-party plugins will, for reasons we will explain. The drafted changes will also limit the capabilities available to extension developers, ostensibly for the sake of speed Read more about Wow, fancy that. Web ad giant Google to block ad-blockers in Chrome. For safety, apparently[…]

Too Good To Go app – anti supermarket food wastage, in 9 EU countries, including NL

Supermarkets create cheap “magic boxes” with end of life food in them. You can see where to pick them up on the app. Jumbo NL has started a pilot in 13 shops.   Het van oorsprong Deense initiatief Too Good To Go heeft na één jaar in Nederland meer dan 200.000 maaltijden gered van de Read more about Too Good To Go app – anti supermarket food wastage, in 9 EU countries, including NL[…]

Massive Oklahoma Government Data Leak Exposes 7 Years of FBI Investigations – unsecured rsync

Last December, a whopping 3 terabytes of unprotected data from the Oklahoma Securities Commission was uncovered by Greg Pollock, a researcher with cybersecurity firm UpGuard. It amounted to millions of files, many on sensitive FBI investigations, all of which were left wide open on a server with no password, accessible to anyone with an internet Read more about Massive Oklahoma Government Data Leak Exposes 7 Years of FBI Investigations – unsecured rsync[…]

Let’s Encrypt ends TLS-SNI-01 validation support

Let’s Encrypt allows subscribers to validate domain control using any one of a few different validation methods. For much of the time Let’s Encrypt has been operating, the options were “DNS-01”, “HTTP-01”, and “TLS-SNI-01”. We recently introduced the “TLS-ALPN-01” method. Today we are announcing that we will end all support for the TLS-SNI-01 validation method Read more about Let’s Encrypt ends TLS-SNI-01 validation support[…]

Famous freak wave recreated in laboratory mirrors Hokusai’s ‘Great Wave’

A team of researchers based at the Universities of Oxford and Edinburgh have recreated for the first time the famous Draupner freak wave measured in the North Sea in 1995. The Draupner wave was one of the first confirmed observations of a freak wave in the ocean; it was observed on the 1st of January Read more about Famous freak wave recreated in laboratory mirrors Hokusai’s ‘Great Wave’[…]

TAUS – machine matching for better AI translations

TAUS, the language data network, is an independent and neutral industry organization. We develop communities through a program of events and online user groups and by sharing knowledge, metrics and data that help all stakeholders in the translation industry develop a better service. We provide data services to buyers and providers of language and translation services. Read more about TAUS – machine matching for better AI translations[…]

Online casino group leaks information on 108 million bets, including winner personal details

An online casino group has leaked information on over 108 million bets, including details about customers’ personal information, deposits, and withdrawals, ZDNet has learned. The data leaked from an ElasticSearch server that was left exposed online without a password, Justin Paine, the security researcher who discovered the server, told ZDNet. ElasticSearch is a portable, high-grade Read more about Online casino group leaks information on 108 million bets, including winner personal details[…]

Google fined $57 million by French data privacy body for hiding terms and forcing users to accept intrusion or lose access

Google has been hit by a €50 million ($57 million) fine by French data privacy body CNIL (National Data Protection Commission) for failure to comply with the EU’s General Data Protection Regulation (GDPR) regulations. The CNIL said that it was fining Google for “lack of transparency, inadequate information and lack of valid consent regarding the ads Read more about Google fined $57 million by French data privacy body for hiding terms and forcing users to accept intrusion or lose access[…]

Torrent Paradise Creates Decentralized ‘Pirate Bay’ With IPFS

The BitTorrent protocol has a decentralized nature but the ecosystem surrounding it has some weak spots. Torrent sites, for example, use centralized search engines which are prone to outages and takedowns. Torrent-Paradise tackles this problem with IPFS, a searchable torrent indexer that’s shared by the people. IPFS, short for InterPlanetary File System, has been around Read more about Torrent Paradise Creates Decentralized ‘Pirate Bay’ With IPFS[…]

Researchers develop smart micro-robots that can adapt to their surroundings

One day, hospital patients might be able to ingest tiny robots that deliver drugs directly to diseased tissue, thanks to research being carried out at EPFL and ETH Zurich. A group of scientists led by Selman Sakar at EPFL and Bradley Nelson at ETH Zurich drew inspiration from bacteria to design smart, highly flexible biocompatible Read more about Researchers develop smart micro-robots that can adapt to their surroundings[…]

WPML WordPress plugin hacked, possibly by angry former employee

WPML (or WP MultiLingual), the most popular WordPress plugin for translating and serving WordPress sites in multiple languages. According to its website, WPML has over 600,000 paying customers and is one of the very few WordPress plugins that is so reputable that it doesn’t need to advertise itself with a free version on the official Read more about WPML WordPress plugin hacked, possibly by angry former employee[…]

UK puts ‘Bird-borne’ radar on albatrosses among 17 new projects to be funded

Albatrosses and radar tracking One of the successful projects will see albatrosses and petrels benefit from further research using ‘bird-borne’ radar devices. Developed by scientists at the British Antarctic Survey (BAS), the attached radars will measure how often tracked wandering albatrosses interact with legal and illegal fishing vessels in the south Atlantic to map the Read more about UK puts ‘Bird-borne’ radar on albatrosses among 17 new projects to be funded[…]

Europe’s controversial ‘link tax’ sent back after member states rebel – The Verge

Copyright activists just scored a major victory in the ongoing fight over the European Union’s new copyright rules. An upcoming summit to advance the EU’s copyright directive has been canceled, as member states objected to the incoming rules as too restrictive to online creators. The EU’s forthcoming copyright rules had drawn attention from activists for Read more about Europe’s controversial ‘link tax’ sent back after member states rebel – The Verge[…]

Twins get some ‘mystifying’ results when they put 5 DNA ancestry kits to the test

Last spring, Marketplace host Charlsie Agro and her twin sister, Carly, bought home kits from AncestryDNA, MyHeritage, 23andMe, FamilyTreeDNA and Living DNA, and mailed samples of their DNA to each company for analysis. Despite having virtually identical DNA, the twins did not receive matching results from any of the companies. In most cases, the results from Read more about Twins get some ‘mystifying’ results when they put 5 DNA ancestry kits to the test[…]

The 773 Million Record “Collection #1” Data Breach

Collection #1 is a set of email addresses and passwords totalling 2,692,818,238 rows. It’s made up of many different individual data breaches from literally thousands of different sources. (And yes, fellow techies, that’s a sizeable amount more than a 32-bit integer can hold.) In total, there are 1,160,253,228 unique combinations of email addresses and passwords. Read more about The 773 Million Record “Collection #1” Data Breach[…]

Japan satellite blasts into space to deliver artificial meteors

A rocket carrying a satellite on a mission to deliver the world’s first artificial meteor shower blasted into space on Friday, Japanese scientists said. A start-up based in Tokyo developed the micro-satellite for the celestial show over Hiroshima early next year as the initial experiment for what it calls a “shooting stars on demand” service. Read more about Japan satellite blasts into space to deliver artificial meteors[…]

Watch an AI robot program itself to pick things up and push them around

Robots normally need to be programmed in order to get them to perform a particular task, but they can be coaxed into writing the instructions themselves with the help of machine learning, according to research published in Science. Engineers at Vicarious AI, a robotics startup based in California, USA, have built what they call a Read more about Watch an AI robot program itself to pick things up and push them around[…]

NL judge says doc’s official warning needs removing from Google

An official warning by the Dutch Doctors guild to a serving doctor needs to be removed from Google’s search result, as the judge says that the privacy of the doctor is more important than the public good that arises from people being warned that this doctor has in some way misbehaved. As a result of Read more about NL judge says doc’s official warning needs removing from Google[…]

Yes, you can remotely hack factory, building site cranes more easily than a garage door

Did you know that the manufacturing and construction industries use radio-frequency remote controllers to operate cranes, drilling rigs, and other heavy machinery? Doesn’t matter: they’re alarmingly vulnerable to being hacked, according to Trend Micro. Available attack vectors for mischief-makers include the ability to inject commands, malicious re-pairing and even the ability to create one’s own Read more about Yes, you can remotely hack factory, building site cranes more easily than a garage door[…]

The Dirty Truth About Turning Seawater Into Drinking Water

A paper published Monday by United Nations University’s Institute for Water, Environment, and Health in the journal Science of the Total Environment found that desalination plants globally produce enough brine—a salty, chemical-laden byproduct—in a year to cover all of Florida in nearly a foot of it. That’s a lot of brine. In fact, the study Read more about The Dirty Truth About Turning Seawater Into Drinking Water[…]