The breach Equifax reported Thursday is very possibly is the most severe of all for a simple reason: the breath-taking amount of highly sensitive data it handed over to criminals. Dan Goodin of ArsTechnica writes: By providing full names, Social Security numbers, birth dates, addresses, and, in some cases, driver license numbers, it provided most of the information banks, insurance companies, and other businesses use to confirm consumers are who they claim to be. The theft, by criminals who exploited a security flaw on the Equifax website, opens the troubling prospect the data is now in the hands of hostile governments, criminal gangs, or both and will remain so indefinitely. Hacks hitting Yahoo and other sites, by contrast, may have breached more accounts, but the severity of the personal data was generally more limited. And in most cases the damage could be contained by changing a password or getting a new credit card number. What's more, the 143 million US people Equifax said were potentially affected accounts for roughly 44 percent of the population. When children and people without credit histories are removed, the proportion becomes even bigger. That means well more than half of all US residents who rely the most on bank loans and credit cards are now at a significantly higher risk of fraud and will remain so for years to come. Besides being used to take out loans in other people's names, the data could be abused by hostile governments to, say, tease out new information about people with security clearances, especially in light of the 2015 hack on the US Office of Personnel Management, which exposed highly sensitive data on 3.2 million federal employees, both current and retired. Meanwhile, if you accept Equifax's paltry "help" you forfeit the right to sue the company, it has said. In its policy, Equifax also states that it won't be helping its customers fix hack-related problems.

UPDATE (9/9/17): Equifax has now announced that "the arbitration clause and class action waiver included in the Equifax and TrustedID Premier terms of use does not apply to this cybersecurity incident."

Bloomberg reported on Friday that a class action seeking to represent 143 million consumers has been filed, and it alleges the company didn't spend enough on protecting data. The class-action -- filed by the firm Olsen Daines PC along with Geragos & Geragos, a celebrity law firm known for blockbuster class actions -- will seek as much as $70 billion in damages nationally.

An anonymous reader shares a report: A new Verizon rewards program, Verizon Up, provides credits that wireless subscribers can use for concert tickets, movie premieres and phone upgrades. But it comes with a catch: Customers must give the carrier access to their web-browsing history, app usage and location data, which Verizon says it uses to personalize the rewards and deliver targeted advertising as its customers browse the web. The trade-off is part of Verizon's effort to build a digital advertising business to compete with web giants Facebook and Google, which often already possess much of the same customer information. Even though Congress earlier this year dismantled tough privacy regulations on telecommunications providers, Verizon still wants customers to opt-in to its most comprehensive advertising program, called Verizon Selects. Data collected under the program is shared with Oath, the digital-media unit Verizon created when it bought AOL and Yahoo. Since access to data from customers could make it easier to tailor ads to their liking, Verizon hopes the information will help it gain advertising revenue to offset sluggish growth in its cellular business.See a current list of Verizon plans here.

Saritha Rai, writing for Bloomberg: A teenage entrepreneur who became a millionaire by 20 before sharing a billion-dollar fortune at 36, Bhavin Turakhia isn't afraid to think big. Now he's putting $45 million of his own money into building a rival to Slack and other office messaging platforms. Flock, a cloud-based team collaboration service, has attracted 25,000 enterprise users and customers including Tim Hortons, Whirlpool and Princeton University. It's a market that has already drawn interest from global technology giants Facebook, Amazon.com and Microsoft. This time last year, few had heard of Bhavin and his younger brother Divyank. That changed when they sold their advertising technology company Media.net, with customers including Yahoo, CNN and the New York Times, to a Chinese consortium for $900 million. The all-cash deal catapulted the duo from mere millionaires into the ranks of the super-rich. "I want to make Flock bigger and better than anything I've built before," Bhavin Turakhia, wearing his signature dark Levi's T-shirt and Puma sweatpants, said at his Bangalore offices.

An anonymous reader quote BuzzFeed: The vast majority of money raised to pay for the legal defense of beloved British cybersecurity researcher Marcus Hutchins was donated with stolen or fake credit card numbers, and all donations, including legitimate ones, will be returned, the manager of the defense fund says. Lawyer Tor Ekeland, who managed the fund, said at least $150,000 of the money collected came from fraudulent sources, and that the prevalence of fraudulent donations effectively voided the entire fundraiser. He said he'd been able to identify only about $4,900 in legitimate donations, but that he couldn't be certain even of those. "I don't want to take the risk, so I just refunded everything," he said.
Two days later, Hutchins posted the following on Twitter. "When sellouts are talking shit about the 'infosec community' remember that someone I'd never met flew to Vegas to pay $30K cash for my bail."

Hutchins is facing up to 40 years in prison, and at first was only allowed to leave his residence for four hours each week. Thursday a judge lifted some restrictions so that Hutchins is now allowed to travel to Milwaukee, where his employer is located. According to Bloomberg, government prosecutors complain Hutchins now "has too much freedom while awaiting trial and may skip the country."

Clickthrough for a list of the evidence government prosecutors submitted to the court this week.

An anonymous reader quotes the AP: A Canadian man accused in a massive hack of Yahoo emails agreed Friday to forgo his extradition hearing and go face the charges in the United States. Karim Baratov was arrested in Hamilton, Ontario, in March under the Extradition Act after U.S. authorities indicted him and three others, including two alleged officers of Russia's Federal Security Service. They are accused of computer hacking, economic espionage and other crimes.

An extradition hearing for the 22-year-old Baratov had been scheduled for early September, but he signed documents before a Canadian judge Friday agreeing to waive it. His lawyer, Amedeo DiCarlo, said that does not amount to an admission of guilt... U.S. law enforcement officials call Baratov a "hacker-for-hire" paid by members of the Federal Security Service, or FSB, considered the successor to the KGB of the former Soviet Union.
Yahoo also believes that attack -- which breached at least 500 million Yahoo accounts in 2014 -- was perpetrated by "a state-sponsored actor." The CBC reports that Baratov lives alone in a large, new house in an expensive subdivision. "His parents either bought him the house," one neighbor told the CBC, "or he's getting money somewhere else, because he doesn't seem to work all day; he just drives up and down the street."

The CBC also reports that Baratov's Facebook page links to a Russian-language site "which claims to offer a number of services, including servers for rent in Russia, protection from distributed denial of service (DDoS) attacks, and domain names in China."

Microsoft said this week that Bing is "bigger than you think" and provided some numbers that could be a surprise to many. The company claims that fully one-third of searches in the US are powered by Bing, either directly or through Yahoo or AOL (both of which provide results generated by Microsoft). From a report: With 9% market share worldwide and 12 billion monthly searches, almost half of that (5 billion) comes from the United States where Bing has 33% market share.

Reader joshtops shares a Bloomberg report: Google isn't the only Silicon Valley employer being accused of hostility to white men. Yahoo and Tata Consultancy Services were already fighting discrimination lawsuits brought by white men before Google engineer James Damore ignited a firestorm -- and got himself fired -- with an internal memo criticizing the company's diversity efforts and claiming women are biologically less suited than men to be engineers. The Yahoo case began last year when two men sued, claiming they'd been unfairly fired after managers allegedly manipulated performance evaluations to favor women. They claim Marissa Mayer approved the review process and was involved in their terminations, and last month a judge ordered the former chief executive be deposed. TCS, meanwhile, is fighting three men who claim the Mumbai-based firm discriminates against non-Indians at its U.S. offices.

Ad companies Facebook and Google slurp one in every three and a half minutes that Britons spend online, according to a survey. From a report: This, says audience metrics company Verto Analytics, accounts for 17 per cent of British adults' time online, the equivalent of 42.7 million days a month across Google, YouTube and Gmail. Similarly, Facebook-owned sites, including the ad-driven data-mining website itself, Instagram and WhatsApp, account for 11 per cent of time online, or a relatively paltry 28.4 million days. "Google and Facebook's share of internet time and ad revenue is staggering considering the hundreds of thousands of websites that exist," said Hannu Verkasalo, CEO of Verto Analytics, in a canned statement. The Verto survey also found that of the top 10 websites used in the UK, the sole British one was the BBC. Microsoft, Apple, Amazon, "Oath" (the new name for the merged Yahoo-AOL beastie), eBay and Twitter were the others, along with Activision Blizzard.

The new "Verizon Up" rewards program released this week by Big Red awards users a credit for every $300 they spend on their Verizon bill that can be redeemed toward various rewards. The only catch is that Verizon requires you to enroll in Verizon Selects, a program that allows the company to track a huge chunk of your personal data. The Verge reports: That includes web browsing, app usage, device location, service usage, demographic info, postal or email address, and your interests. Furthermore, that data gets shared with Verizon's newly formed Oath combination (aka AOL and Yahoo), plus with "vendors and partners" who work with Verizon. Which is kind of a long list of people who have access to what feels like a fairly significant amount of your data. It's worth noting that Verizon has been operating under these terms and conditions for a while with an earlier rewards program called "Smart Rewards," which also required users to opt in to the Verizon Selects tracking program. But that doesn't make it any better that this is the trade-off you're forced to make to take advantage of the rewards.

Firefox has just launched three new Test Pilot experiments that bring voice search, built-in note taking and a tool for sending large files to the browser. From a report: While the new voice search, which currently works on the Google, Yahoo and DuckDuckGo homepages, and note-taking features are browser plugins, the new Send tool is web-based and allows anybody -- no matter which browser they use -- to send files up to 1GB in size. It encrypts the file as it is uploaded and gives you a link you can share with your friends and co-workers. Files are automatically deleted after one download or after one day. That's not exactly the most novel concept (and Mozilla has often been criticized for diverting its attention from its core competencies), but the built-in encryption and the open-source nature of the tool do make up for that.

schwit1 quotes a report from Defense One: Even if the cop who pulls you over doesn't recognize you, the body camera on his chest eventually just might. Device-maker Motorola will work with artificial intelligence software startup Neurala to build "real-time learning for a person of interest search" on products such as the Si500 body camera for police, the firm announced Monday. Italian-born neuroscientist and Neurala founder Massimiliano Versace has created patent-pending image recognition and machine learning technology. It's similar to other machine learning methods but far more scalable, so a device carried by that cop on his shoulder can learn to recognize shapes and -- potentially faces -- as quickly and reliably as a much larger and more powerful computer. It works by mimicking the mammalian brain, rather than the way computers have worked traditionally.

Versace's research was funded, in part, by the Defense Advanced Research Projects Agency or DARPA under a program called SyNAPSE. In a 2010 paper for IEEE Spectrum, he describes the breakthrough. Basically, a tiny constellation of processors do the work of different parts of the brain -- which is sometimes called neuromorphic computation -- or "computation that can be divided up between hardware that processes like the body of a neuron and hardware that processes the way dendrites and axons do." Versace's research shows that AIs can learn in that environment using a lot less code.

An anonymous reader writes: A company is going around buying abandoned Chrome extensions from their original developers and converting these add-ons into adware. The latest case is the Particle for YouTube Chrome extension, a simple tool that allows users to change the UI and behavior of some of YouTube's standard features. Because Google was planning major changes to YouTube's UI, the extension's original author decided to retire it and create a new one. This is when the a mysterious company approached the original author and offered to buy the extension from him for a price of his choosing. The original dev says he gave them a high price, but the company agreed to pay right away, but only after the dev signed an non-disclosure agreement preventing him from talking about the company or the transaction. Soon after the sale, the company issued an update that included code for injecting rogue ads on websites such as Google, Yahoo, Bing, Amazon, eBay, and Booking.com. Users also found other Chrome extensions that were also bought by the same company and had also been turned into adware, such as "Typewriter Sounds" and "Twitch Mini Player." According to some other Chrome extension devs, there are many companies willing to pay large sums of money for taking over legitimate Chrome extensions.

For one moment on Monday evening, the prices of several stocks on Nasdaq -- including those of Amazon, Apple, eBay, Google, and Microsoft -- were all priced exactly the same, $123.47. From a report: In a statement obtained by the Financial Times, Nasdaq said the culprit was "improper use of test data" that was picked up by third party financial data providers. The exchange said it was "working with third party vendors to resolve this matter." The issue was replicated across major financial websites, including Bloomberg, Google Finance, and Yahoo Finance, and it's not known when it all started.

An anonymous reader writes Budget airline VivaColombia is considering plans to remove all seats from its planes and make passengers stand. They hope the move will drive down fares by allowing them to squeeze more passengers into each flight, opening up air travel to working class Colombians and budget holidaymakers. The no-frills carrier announced last week that it is adding 50 new Airbus 320s to its fleet to capitalise on the country's growing tourist market. The new planes will have more seats and lower running costs with the first one going into service at the start of 2018. VivaColombia's founder and CEO William Shaw told the Miami Herald the airline was looking into vertical travel options. He said: "There are people out there right now researching whether you can fly standing up -- we're very interested in anything that makes travel less expensive." He added: "Who cares if you don't have an inflight entertainment system for a one-hour flight? Who cares that there aren't marble floors... or that you don't get free peanuts?"

Earlier this month as Verizon completed its acquisition, a number of Tumblr employees, as well as those at other Verizon-owned properties, like the Huffington Post, were laid off. This comes at an interesting time for Tumblr, which is increasingly struggling to find a business model. From an article on NYMag: The future of Tumblr is still an open question. The site is enormously popular among the coveted youth crowd -- that's partly why then-CEO Marissa Mayer paid $1 billion for the property in 2013 -- but despite a user base near the size of Instagram's, Tumblr never quite figured out how to make money at the level Facebook has led managers and shareholders to expect. For a long time, its founder and CEO David Karp was publicly against the idea of inserting ads into users' timelines. (Other experiments in monetization, like premium options, never caught on: It's tough to generate revenue when your most active user base is too young to have a steady income.) Even once the timeline became open to advertising, it was tough to find clients willing to brave the sometimes-porny waters of the Tumblr Dashboard. Since it joined Yahoo, the site has started displaying low-quality "chum"-style ads in between user posts on the Dashboard. Looked at from a bottom-line perspective, Tumblr is an also-ran like its parent company -- a once-hot start-up that has eased into tech-industry irrelevance. [...] It is rare, but not at all unprecedented, for a site to reach Tumblr's size, prominence, and level of influence and still be unable to build a sustainable business. Twitter steers a huge portion of online culture, and has become an essential water cooler and newswire for journalists, tech workers, and otaku Nazis, but still has trouble turning a profit.

An anonymous reader writes: Former Uber CEO Travis Kalanick has absorbed blistering criticism for the way he handled allegations of sexual misconduct at the San Francisco riding-hailing service. But he can at least count on the support of one big name in Silicon Valley: former Yahoo CEO Marissa Mayer. Speaking at the annual Stanford Directors' College Tuesday, Mayer defended Kalanick, suggesting that he was unaware of the toxic culture brewing at Uber because of the company's rapid growth. Mayer's name has come up in reports as a possible replacement for Kalanick at Uber, though there's no indication the company has had talks with her. "Scale is incredibly tricky," Mayer said. "I count Travis as one of my friends. I think he's a phenomenal leader; Uber is ridiculously interesting. I just don't think he knew," she said. "When your company scales that quickly, it's hard." Mayer then compared Uber's situation to the early days of Google when it first brought in Eric Schmidt as CEO to help co-founders Sergey Brin and Larry Page manage the company.

Long-time Slashdot reader nri tipped us off to a developing story in Victoria, Australia. Yahoo News reports: Victoria Police officials announced on Saturday, June 24, they were withdrawing all speed camera infringement notices issued statewide from June 6 after a virus in the cameras turned out to be more widespread than first thought. "That does not mean they [the infringement notices] won't not be re-issued," Assistant Commissioner Doug Fryer told reporters, explaining that he wants to be sure the red light and speed cameras were working correctly. Acting Deputy Commissioner Ross Guenther told reporters on Friday that 55 cameras had been exposed to the ransomware virus, but they've now determined 280 cameras had been exposed. The cameras are not connected to the internet, but a maintenance worker unwittingly connected a USB stick with the virus on it to the camera system on June 6.

Fryer said that about 1643 tickets would be withdrawn -- up from the 590 that police had announced on Friday -- and another five and a half thousand tickets pending in the system would be embargoed. Fryer said he was optimistic the 7500 to 8000 tickets affected could be re-issued, but for now police would not issue new tickets until police had reviewed the cameras to ensure they were functioning properly... The "WannaCry" malware caused the cameras to continually reboot, Fryer said. Fryer said there was no indication the malware had caused inaccurate radar readings, but police were being "over cautious" to maintain public faith in the system.
Last week Victoria's Police Minister was "openly furious" with the private camera operator, saying the group hadn't notified the relevant authorities about the infection.

An anonymous reader quotes a report from The Verge: In 2014, Tumblr was on the front lines of the battle for net neutrality. The company stood alongside Amazon, Kickstarter, Etsy, Vimeo, Reddit, and Netflix during Battle for the Net's day of action. Tumblr CEO David Karp was also part of a group of New York tech CEOs that met with then-FCC chairman Tom Wheeler in Brooklyn that summer, while the FCC was fielding public comment on new Title II rules. President Obama invited Karp to the White House to discuss various issues around public education, and in February 2015 The Wall Street Journal reported that it was the influence of Karp and a small group of liberal tech CEOs that swayed Obama toward a philosophy of internet as public utility. But three years later, as the battle for net neutrality heats up once again, Tumblr has been uncharacteristically silent. The last mention of net neutrality on Tumblr's staff blog -- which frequently posts about political issues from civil rights to climate change to gun control to student loan debt -- was in June 2016. And Tumblr is not listed as a participating tech company for Battle for the Net's next day of action, coming up in three weeks. One reason for Karp and Tumblr's silence? Last week Verizon completed its acquisition of Tumblr parent company Yahoo, kicking off the subsequent merger of Yahoo and AOL to create a new company called Oath. As one of the world's largest ISPs, Verizon is notorious for challenging the principles of net neutrality -- it sued the FCC in an effort to overturn net neutrality rules in 2011, and its general counsel Kathy Grillo published a note this April complimenting new FCC chairman Ajit Pai's plan to weaken telecommunication regulations.

Last December VidAngel fought three Hollywood studios in court for the right to stream filtered versions of movies. Now fogez reports that "they have come up with a new tactic in their attempts to bring filtering choice into the streaming media equation. Instead of leveraging the legal loophole that landed them in court, VidAngel is now going to insert themselves as a filtering proxy for services like Netflix and Amazon." From the Hollywood Reporter: Its new $7.99 per month service piggybacks on users' streaming accounts. Customers log into the VidAngel app, link it to their other accounts and then filter out the language, nudity and violence in that content to their heart's desire... "Out of the gate we'll be supporting Netflix and Amazon and HBO through Amazon channels," says Harmon, adding that Hulu, iTunes and Vudu will follow... Harmon says it remains to be seen if the studios will fight VidAngel's new platform, but his biggest concern is how Amazon and Netflix will respond. He says his company has reached out to the streamers, and he hopes they'll raise any concerns through conversation instead of litigation... "VidAngel's philosophy is very libertarian," he says. "Let directors create what they want, and let viewers watch how they want in their own home. That kind of philosophy respects the views of both parties."
The original submission describes the conflict as a "freedom of choice versus Hollywood."

McGruber writes: Booz Allen Hamilton, the contracting firm that was Edward Snowden's employer when he leaked classified information from the NSA has announced that it is under a federal civil and criminal investigation of its billing practices. The disclosure in a regulatory filing sent shares of parent company Booz Allen Hamilton Holding Corp. tumbling $7.33, or 18.6 percent, to $32 in Friday trading.