And there’s been a lot of concern that, after their huge ICO fundraises and with no contractual obligation to deliver a product, founders would have little incentive to stick around and do the hard work. But we’re now one year in, and it’s heartening to see that real, meaningful products are shipping.
Source: venturebeat.com
Last April, I started a conversation with cybersecurity company Bromium. The company was keen to uncover where the streams of revenue generated by cybercrime eventually go and whether this money is ultimately supporting other areas of crime. Over the past 10 months, I have been examining this question, and I must say there have been some eyebrow-raising findings.
Source: venturebeat.com
The newly disclosed bypass is a medium-severity issue that affects Windows 10 S or any Windows 10 machine with user mode code integrity (UMCI) enabled, such as enterprise Windows 10 PCs configured with Microsoft’s virtual container known as Device Guard.
Source: zdnet.com
New Morgan Stanley analysis reckons that Bitcoin, currently a little over $8,300, needs to clear $8,600 in order for mining to be profitable.
Source: fortune.com
An FDA document released this week reveals several of the FDA’s plans, including the desire to force device makers to include mandatory update systems inside products for the purpose of delivering critical security patches.
Source: bleepingcomputer.com
Last week, Uber and the FTC finally settled on a revised consent agreement that now covers both the 2014 and 2016 breaches. The new agreement includes even more comprehensive security and privacy risk assessments, covering the security of Uber’s software development environment and use of the bug bounty.
Source: ieee.org
Coin burning, if you’re not familiar, is a well-trod path to inflating the value of a cryptocurrency with a fixed supply, like Bitcoin Cash. The value of coins with a fixed supply is based on increasing demand and steadily decreasing supply. If you can accelerate the diminishment of available coin stock, then theoretically that should increase demand for the remaining supply and, in turn, the coin’s value.
A mobile application built by a third party for the RSA security conference in San Francisco this week was found to have a few security issues of its own—including hard-coded security keys and passwords that allowed a researcher to extract the conference’s attendee list. The conference organizers acknowledged the vulnerability on Twitter, but they say that only the first and last names of 114 attendees were exposed.
Gamble was arrested in February of 2016 and he pleaded guilty to ten hacking charges in October of last year. Now 18 years old, he was finally sentenced on Friday afternoon local time in the Old Bailey, the central criminal court in London after his first sentencing hearing in January was postponed. The judge ruled that he will have to spend two years at a youth detention center, according to reports from the court.
The Bitcoin blockchain now consists of over 500,000 such blocks and a new one is added roughly every ten minutes. Most of these blocks contain data related to sending and receiving Bitcoin, but the blockchain also contains its fair share of short messages—like the one Nakamoto put in the first-ever block of data—photos, and even artworks hidden among the data if you know where to look and how to extract them.
All of the transaction data for Bitcoin and other cryptocurrencies are stored in a public ledger known as Blockchains. The tax office has been admitted generous access to bank transfers and other data, which enables identifying people. By matching the transfers it is evident that in the past most citizens have not reported profits made with virtual currencies.
Source: metropolitan.fi
The federal government has absolutely experimented with mind control in a variety of methods, but the documents here do not appear to be official. Waltman had no idea why these documents were included in his request and isn’t sure why the government is holding them. The WSFC did not respond to requests for more information.
Source: boingboing.net
Peter Thiel’s data-mining company is using War on Terror tools to track American citizens. The scary thing? Palantir is desperate for new customers.
Source: bloomberg.com
Researchers found a new iOS vulnerability called ‘trustjacking,’ which exploits a feature called iTunes Wi-Fi Sync to give attackers persistent control over victims’ devices.
Source: threatpost.com
An arbitrary file write vulnerability is where a user can create or modify a file in a location they could not normally access. This might be due to a privileged service incorrectly sanitizing information passed by the user or due to a symbolic link planting attack where the user can write a link into a location which is subsequently used by the privileged service. The ideal vulnerability is one where the attacking user not only controls the location of the file being written but also the entire contents.
The patent, which was filed in 2014 but approved on Tuesday, comes at a time when regulators’ desire to track and police cryptocurrency is running up against the technology’s core promises of pseudonymity for users. Bitcoin users, for example, are represented in the virtual currencies ledger by strings of text and numbers generated by a cryptographic algorithm. Taxation for Bitcoin thus relies on self-reporting.
Ethereum contracts are immutable but there is a way to design contracts which can be upgraded, so you can fix bugs quickly and add features. We’ll see how to create upgradable contracts.
Source: zohaib.me
Bryan Seely, a security expert who has written extensively about the use of fake search listings to conduct online bait-and-switch scams, said the purpose of sites like those that Seorehabs pays people to create is to funnel calls to a handful of switchboards that then sell the leads to rehab centers that have agreed to pay for them. Many rehab facilities will pay hundreds of dollars for leads that may ultimately lead to a new patient. After all, Seely said, some facilities can then turn around and bill insurance providers for thousands of dollars per patient.
The malware was designed to copy the credentials in a way that wouldn’t be detected by antivirus programs. The copying process, for instance, remained active for less than one minute. The malware didn’t steal general credentials, and it copied cookies and saved passwords by querying copies of the original cookies and LoginData files rather than through other means.
Source: arstechnica.com
UPDATE, 4/18/18 – it appears Basecoin has changed its name to “Basis Protocol” and has alsoraised $133 million from top Valley investors anyway. Despite the fact that it’s an economic dumpster fire.
Source: prestonbyrne.com