Security News and Views for the World • The Register

Amazon slams media for not saying nice things about AWS, denies it strip-mines open-source code for huge profits

IT isn't supposed to stand for Insider Trading... Palo Alto Networks sysadmin and pals accused of $7m shares caper

Hey, ICANN, if you need good reasons to halt the .org super-sell-off, here are two: Higher fees, more website downtime

Google tightens the screw on 'less secure apps', will block most access from June 2020

IBM tailors Swift relationship after 'review of open source priorities'

In an homage to Harry Potter's every-flavour jelly beans, Microsoft unveils 'Lucky Dip' Windows 10 testing ring

Deadly 737 Max jets no longer a Boeing concern – for now: Production suspended after biz runs out of parking space

Where's our data, Google? Chrome 79 update 'a catastrophe' for Android devs with WebView apps

Half a billion here, half a billion there – pretty soon you're talking real money: US Congress earmarks $425m for 2020 election security

Destroyed: A method of destroying Whatsapp group chats forever, say infosec bods of vuln patch

London's Met Police splash the cash on e-learning 'cyber' training for 4k staffers

It's 2019 so, of course, this Wells Fargo employee accused of stealing customer cash posed with wads of dosh on Instagram, Facebook

Just an FYI: That cool funky CI/CD tool you're installing now could be next year's legacy tech

Devs face a choice: Go all in with a single cloud giant's toolset – or bring together best tools from a bunch of vendors

Continuous Lifecycle London blind bird offer takes off soon: Book your place today at our DevOps conference

Hey kids! Forget about Disney – who fancies a trip to DevOps World?

Google security engineer says she was fired for daring to remind Googlers they do indeed have labor rights

Digital Ministry merry-go-round set to continue as Nicky Morgan reappointed, made a life peer

US and China wave white flags, hit pause button on trade war

Lynch was 'willing to lie' to High Court over Autonomy whistleblower, claims HPE

Remember Unrollme, the biz that helped you automatically ditch unwanted emails? Yeah, it was selling your data

I don't want to go on the cart! Windows 10 Mobile hauls itself from the grave one last time

iFixit surgeons dissect Apple's pricey Mac Pro: Industry standard sockets? Repair diagrams? Who are you and what have you done to Apple?

What do you mean your eardrums need a break? Samsung-owned JBL touts solar-powered wireless headphones you don't need to charge

Geek's Guide

Happy Artemis Day everybody! NASA preps its monster rocket for testing

Someone get Greenpeace on the line. Boffins clock carbon 'pollution' cloud 30,000 light-years wide choking galaxies

And now for this evening's space weather report. We've got a hotspot of satellite-wrecking 'killer electrons' in the outer Van Allen belt...

Rocket Lab ends year by cutting ribbon on first launchpad in the US

We gathered together some Register-reading IT pros to talk about voice AI assistants in the legal, finance worlds. Here's what they said...

Intel is doing so well at AI acceleration, it's dropped $2bn on another neural-net chip upstart (third time's a charm)

Put the crypt into cryptocoin: Amid grave concerns, lawyers to literally dig into exchange exec who died owing $190m

Internet of crap (encryption): IoT gear is generating easy-to-crack keys

Verity Stob

Hate speech row: Fine or jail anyone who calls people boffins, geeks or eggheads, psychology nerd demands

Cool 'joke', bro, you could have killed someone: Epilepsy Foundation sics cops on sick flashing-light Twitter trolls

The National Museum of Computing goes Marie Kondo at Christmas: Luckily all the Lego sparks joy

Buzz kill: Crook, 73, conned investors into shoveling millions into geek-friendly caffeine-loaded chocs that didn't exist. Now he's in jail

Security

Half a billion here, half a billion there – pretty soon you're talking real money: US Congress earmarks $425m for 2020 election security

Just another, oh, $1.675bn to go to defend systems, it is estimated

17 Dec 21:35 | 4

Security

Destroyed: A method of destroying Whatsapp group chats forever, say infosec bods of vuln patch

Good news for Check Point; less so for blabbermouths with regrets

17 Dec 11:00 | 23

Security

London's Met Police splash the cash on e-learning 'cyber' training for 4k staffers

Getting tooled up for future crimes

17 Dec 09:16 | 15

Security

It's 2019 so, of course, this Wells Fargo employee accused of stealing customer cash posed with wads of dosh on Instagram, Facebook

Feds are not amused

16 Dec 20:30 | 28

Security

Your workmates might still be reading that 'unshared' Slack document

IRC-for-millennials biz shrugs: Yeah, we might fix that later

16 Dec 16:00 | 14

Security

Chinese e-commerce site LightInTheBox.com bared 1.3TB of server logs, user data and more

ExclusiveThings you don't do with Elasticsearch dbs, number 1: Put them on the web

16 Dec 14:04 | 5

Security

VMware warning, OpenBSD gimme-root hole again, telco hit with GDPR fine, Ring camera hijackings, and more

RoundupYour quick summary of infosec news beyond everything else we've reported

16 Dec 09:11 | 20

Security

Valuable personal info leaks from Facebook – not Zuck selling it, unencrypted hard drives of staff data stolen

Car smash-and-grab ends with loss of payroll details for 20,000 employees

13 Dec 20:39 | 56

Security

Ever wonder how hackers could possibly pwn power plants? Here are 54 Siemens bugs that could explain things

Arbitrary code execution in a controller, what could go wrong?

13 Dec 10:51 | 57

Security

NPM swats path traversal bug that lets evil packages modify, steal files. That's bad for JavaScript crypto-wallets

Trio of vulnerabilities made registry full of uncertain code even more of a risk

13 Dec 02:05 | 19

Security

Iran says it staved off cyber attack but doesn't blame US

Here's a rundown of some of the Middle East's cyber argy-bargy

12 Dec 18:12 | 9

Security

Disgrace of Base: Scammy hordes force Keybase to end cryptocoin giveaway

It's Lumen awful: Space Drop halted due to excessive douchebaggery

12 Dec 13:50 | 2

Security

It's time you were T0RTT a lesson: Here's how you could build a better Tor, say boffins

Uni brains pitch smart math for speeding up establishment of circuits in anonymizing onion network

12 Dec 11:16 | 15

Security

Microsoft movie tried to Azure Ignite attendees about CPU side-channel flaws, but biz wouldn't be drawn on details

'Sir, they're about to disclose the vulns!' 'Damn it. Accelerate the rollout!'

12 Dec 10:00 | 11

Security

LightAnchors array: LEDs in routers, power strips, and more, can sneakily ship data to this smartphone app

VideoTalk about gone in a flash

12 Dec 08:02 | 74

Security

You had one job, Cupertino: Apple's Intelligent Tracking Protection actually gets tracking protection

Gap in browser privacy tech embarrassingly detected by Google

12 Dec 05:35 | 10

Security

Bad news: KeyWe Smart Lock is easily bypassed and can't be fixed

Good news? There is no good news

11 Dec 16:30 | 47

Security

Google Chrome will check for leaked credentials every time you sign in anywhere

Double-encrypted. That said, if you're worried about over-sharing, what are you doing on Chrome?

11 Dec 13:30 | 46

Security

Beware of bad Santas this Xmas: Piles of insecure smart toys fill retailers' shelves

Latest Which? study with NCC Group highlights toys it ain't smart to buy

11 Dec 11:00 | 15

Security

Alleged Nigerian social engineer wins free flight to the US for business email fraud and love scams

Feds get extradition for 64 year-old fraud suspect who allegedly netted hundreds of thousands of dollars

11 Dec 00:24 | 17

Amazon slams media for not saying nice things about AWS, denies it strip-mines open-source code for huge profits

IT isn't supposed to stand for Insider Trading... Palo Alto Networks sysadmin and pals accused of $7m shares caper

Hey, ICANN, if you need good reasons to halt the .org super-sell-off, here are two: Higher fees, more website downtime

Google tightens the screw on 'less secure apps', will block most access from June 2020

IBM tailors Swift relationship after 'review of open source priorities'

In an homage to Harry Potter's every-flavour jelly beans, Microsoft unveils 'Lucky Dip' Windows 10 testing ring

Deadly 737 Max jets no longer a Boeing concern – for now: Production suspended after biz runs out of parking space

Where's our data, Google? Chrome 79 update 'a catastrophe' for Android devs with WebView apps

Half a billion here, half a billion there – pretty soon you're talking real money: US Congress earmarks $425m for 2020 election security

Destroyed: A method of destroying Whatsapp group chats forever, say infosec bods of vuln patch

London's Met Police splash the cash on e-learning 'cyber' training for 4k staffers

It's 2019 so, of course, this Wells Fargo employee accused of stealing customer cash posed with wads of dosh on Instagram, Facebook

Just an FYI: That cool funky CI/CD tool you're installing now could be next year's legacy tech

Devs face a choice: Go all in with a single cloud giant's toolset – or bring together best tools from a bunch of vendors

Continuous Lifecycle London blind bird offer takes off soon: Book your place today at our DevOps conference

Hey kids! Forget about Disney – who fancies a trip to DevOps World?

Google security engineer says she was fired for daring to remind Googlers they do indeed have labor rights

Digital Ministry merry-go-round set to continue as Nicky Morgan reappointed, made a life peer

US and China wave white flags, hit pause button on trade war

Lynch was 'willing to lie' to High Court over Autonomy whistleblower, claims HPE

Remember Unrollme, the biz that helped you automatically ditch unwanted emails? Yeah, it was selling your data

I don't want to go on the cart! Windows 10 Mobile hauls itself from the grave one last time

iFixit surgeons dissect Apple's pricey Mac Pro: Industry standard sockets? Repair diagrams? Who are you and what have you done to Apple?

What do you mean your eardrums need a break? Samsung-owned JBL touts solar-powered wireless headphones you don't need to charge

Happy Artemis Day everybody! NASA preps its monster rocket for testing

Someone get Greenpeace on the line. Boffins clock carbon 'pollution' cloud 30,000 light-years wide choking galaxies

And now for this evening's space weather report. We've got a hotspot of satellite-wrecking 'killer electrons' in the outer Van Allen belt...

Rocket Lab ends year by cutting ribbon on first launchpad in the US

We gathered together some Register-reading IT pros to talk about voice AI assistants in the legal, finance worlds. Here's what they said...

Intel is doing so well at AI acceleration, it's dropped $2bn on another neural-net chip upstart (third time's a charm)

Put the crypt into cryptocoin: Amid grave concerns, lawyers to literally dig into exchange exec who died owing $190m

Internet of crap (encryption): IoT gear is generating easy-to-crack keys

Hate speech row: Fine or jail anyone who calls people boffins, geeks or eggheads, psychology nerd demands

Cool 'joke', bro, you could have killed someone: Epilepsy Foundation sics cops on sick flashing-light Twitter trolls

The National Museum of Computing goes Marie Kondo at Christmas: Luckily all the Lego sparks joy

Buzz kill: Crook, 73, conned investors into shoveling millions into geek-friendly caffeine-loaded chocs that didn't exist. Now he's in jail

Security

Half a billion here, half a billion there – pretty soon you're talking real money: US Congress earmarks $425m for 2020 election security

Destroyed: A method of destroying Whatsapp group chats forever, say infosec bods of vuln patch

London's Met Police splash the cash on e-learning 'cyber' training for 4k staffers

It's 2019 so, of course, this Wells Fargo employee accused of stealing customer cash posed with wads of dosh on Instagram, Facebook

Your workmates might still be reading that 'unshared' Slack document

Chinese e-commerce site LightInTheBox.com bared 1.3TB of server logs, user data and more

VMware warning, OpenBSD gimme-root hole again, telco hit with GDPR fine, Ring camera hijackings, and more

Valuable personal info leaks from Facebook – not Zuck selling it, unencrypted hard drives of staff data stolen

Ever wonder how hackers could possibly pwn power plants? Here are 54 Siemens bugs that could explain things

NPM swats path traversal bug that lets evil packages modify, steal files. That's bad for JavaScript crypto-wallets

Iran says it staved off cyber attack but doesn't blame US

Disgrace of Base: Scammy hordes force Keybase to end cryptocoin giveaway

It's time you were T0RTT a lesson: Here's how you could build a better Tor, say boffins

Microsoft movie tried to Azure Ignite attendees about CPU side-channel flaws, but biz wouldn't be drawn on details

LightAnchors array: LEDs in routers, power strips, and more, can sneakily ship data to this smartphone app

You had one job, Cupertino: Apple's Intelligent Tracking Protection actually gets tracking protection

Bad news: KeyWe Smart Lock is easily bypassed and can't be fixed

Google Chrome will check for leaked credentials every time you sign in anywhere

Beware of bad Santas this Xmas: Piles of insecure smart toys fill retailers' shelves

Alleged Nigerian social engineer wins free flight to the US for business email fraud and love scams

POPULAR

FUSE for macOS: Why a popular open source library became closed source and commercially licensed

Where's our data, Google? Chrome 79 update 'a catastrophe' for Android devs with WebView apps

Wham, bam, thank you scram button: Now we have to go all MacGyver on the server room

Canada's .ca supremo in hot water after cyber-smut stash allegedly found on his work Mac ‒ and three IT bods fired

VMware warning, OpenBSD gimme-root hole again, telco hit with GDPR fine, Ring camera hijackings, and more

Chinese e-commerce site LightInTheBox.com bared 1.3TB of server logs, user data and more

It's 2019 so, of course, this Wells Fargo employee accused of stealing customer cash posed with wads of dosh on Instagram, Facebook

Your workmates might still be reading that 'unshared' Slack document

Internet of crap (encryption): IoT gear is generating easy-to-crack keys

Buzz kill: Crook, 73, conned investors into shoveling millions into geek-friendly caffeine-loaded chocs that didn't exist. Now he's in jail

It's the end of the 20-teens, and your Windows PC can still be pwned by nothing more than a simple bad font

Americans should have strong privacy-protecting encryption ...that the Feds and cops can break, say senators

Intel might want to reconsider the G part of SGX – because it's been plunderstruck

Don't pay off Ryuk ransomware, warn infoseccers: Its creators borked the decryptor

SIEMs like a stretch: Elastic searches for cash from IT pros with security budgets

Advertisers want exemption from web privacy rules that, you know, enforce privacy

Ad network ransomware crook to flog £5k Rolex after court confiscates £270k in ill-gotten gains

Metasploit for drones? Best of luck with that, muses veteran tinkerer

OpenBSD bugs, Microsoft's bad update, a new Nork hacking crew, and more

China fires up 'Great Cannon' denial-of-service blaster, points it toward Hong Kong

Reasons to be fearful 2020: Smishing, public Wi-Fi, deepfakes... and all the usual suspects

SANS Announces 13th Holiday Hack Challenge and 2nd KringleCon infosec conference