Equifax CIO, CSO “retire” in wake of huge security breach

Press release: “The company’s review of the facts is still ongoing.”

Enlarge / A monitor displays Equifax Inc. signage on the floor of the New York Stock Exchange (NYSE) in New York, US, on Friday, Sept. 15, 2017. (credit: Michael Nagle/Bloomberg via Getty Images)

On Friday, Equifax announced that two top executives would be retiring in the aftermath of the company’s massive security breach that affected 143 million Americans.

According to a press release, the company said that its Chief Information Officer, David Webb, and Chief Security Officer, Susan Mauldin, would be leaving the company immediately and were being replaced by internal staff. Mark Rohrwasser, who has lead Equifax’s international IT operations, is the company’s new interim CIO. Russ Ayres, who had been a vice president for IT at Equifax, has been named as the company’s new interim CSO.

The notorious breach was accomplished by exploiting a Web application vulnerability that had been patched in early March 2017.

Read 3 remaining paragraphs | Comments

Alphabet might be about to invest $1 billion in Lyft

The ride-hailing company continues to make friends and partners.

Enlarge (credit: Justin Sullivan/Getty Images)

Last week, my colleague Tim Lee explained why Lyft is going to be like Android, licensing and partnering with others rather than doing everything in-house. On Friday, Reuters reported on a notable deal that adds more weight to that analysis. 

According to an unnamed source "familiar with the talks," Alphabet is in the frame as a potential investor. Lyft has already been working with Alphabet-owned Waymo for some months, but this deal would give the ride sharing service a big infusion of cash.

It has been a few good weeks for the pink-hued transportation service. Last week it also partnered with Drive.ai, which, like Waymo, is working on autonomous vehicle technology. At the end of August, it also announced an expansion into another 32 states, giving it access to almost the entire population. The relative lack of fuss that has accompanied all of this is in stark contrast to the lawsuits and boardroom intrigue now synonymous with rival Uber.

Read 2 remaining paragraphs | Comments

Dealmaster: Get a Dell Inspiron Core i7 laptop with a 512GB SSD for $580

Plus iPhone 8 pre-orders, deals on ThinkPad laptops, and more.

Greetings, Arsians! Courtesy of our friends at TechBargains, we have another round of deals to share. Today's list has discounts on a slew of Dell and Lenovo laptops, including a Dell Inspiron 15 5000 series notebook with a Core i7-7500U chip and 512GB SSD for $580. We also have a roundup of your options to buy Apple's new iPhone 8 and iPhone 8 Plus.

You can find the rest of the deals below.

Note: Ars Technica may earn compensation for sales from links on this post through affiliate programs.

Read 7 remaining paragraphs | Comments

MetalKettle Addon Repository Vulnerable After GitHub ‘Takeover’

A popular third-party Kodi repository has become vulnerable after an outsider re-registered the GitHub account of its developer, who previously deleted his accounts. Former Kodi-addon developer MetalKettle urges people to delete his repository, stating that it’s no longer safe.

Source: TF, for the latest info on copyright, file-sharing, torrent sites and ANONYMOUS VPN services.

A few weeks ago MetalKettle, one of the most famous Kodi addon developers of recent times, decided to call it quits.

Worried about potential legal risks, he saw no other option than to halt all development of third-party Kodi addons.

Soon after this announcement, the developer proceeded to remove the GitHub account which was used to distribute his addons. However, he didn’t realize that this might not have been the best decision.

As it turns out, GitHub allows outsiders to re-register names of deleted accounts. While this might not be a problem in most cases, it can be disastrous when the accounts are connected to Kodi add-ons that are constantly pinging for new updates.

In essence, it means that the person who registered the Github account can load content onto the boxes of people who still have the MetalKettle repo installed. Quite a dangerous prospect, something MetalKettle realizes as well.

“Someone has re-registered metalkettle on github. So in theory could pollute any devices with the repo still installed,” he warned on Twitter.

“Warning : if any users have a metalkettle repo installed on their systems or within a build – please delete ASAP,” he added.

MetalKettle warning

It’s not clear what the intentions of the new MetalKettle user are on GitHub, if he or she has any at all. But, people should be very cautious and probably remove it from their systems.

The real MetalKettle, meanwhile, alerted TVAddons to the situation and they have placed the repository on their Indigo blacklist of banned software. This effectively disables the repository on devices with Indigo installed.

GitHub on their turn may want to reconsider their removal policy. Perhaps it’s smarter to not make old usernames available for registration, at least not for a while, as it’s clearly a vulnerability.

This is also shown by another Kodi repo controversy that appeared earlier today. Another GitHub account that was reportedly deleted earlier, resurfaced today pushing a new version of the Exodus addon and other sources.

According to some, the GitHub account is operated by the original Exodus developers and perfectly safe, but others warn that the name was reregistered in bad faith.

Source: TF, for the latest info on copyright, file-sharing, torrent sites and ANONYMOUS VPN services.

BlackBerry smartwatches? Timex and BlackBerry announce patent license deal

BlackBerry doesn’t make its own smartphones anymore. Instead the company licenses its intellectual property to companies including TCL and Optiemus who build and sell phones like the BlackBerry KeyOne and DTEK60. Now it looks like BlackBerry may be planning a similar move for smartwatches. Maybe. Timex and BlackBerry announced a patent license agreement this week, […]

BlackBerry smartwatches? Timex and BlackBerry announce patent license deal is a post from: Liliputing

BlackBerry doesn’t make its own smartphones anymore. Instead the company licenses its intellectual property to companies including TCL and Optiemus who build and sell phones like the BlackBerry KeyOne and DTEK60. Now it looks like BlackBerry may be planning a similar move for smartwatches. Maybe. Timex and BlackBerry announced a patent license agreement this week, […]

BlackBerry smartwatches? Timex and BlackBerry announce patent license deal is a post from: Liliputing

Musical vaginas, dining on humans, and cat fluidity honored with Ig Nobels

The awards that dare to ask whether you can feel your ears growing.

Enlarge / The speaker goes where? (credit: Babypod)

As the person who is responsible for covering the annual Nobel Prizes in the sciences, it's always good to get a warning that they're about to be awarded. For me, that warning is provided by the Annals of Improbable Research, which has spent the last 27 years hosting its First-Annual Ig Nobel Prizes.

Complete with a ceremony that features a mini-opera and a Nobel Prize winner who's tasked with sweeping paper airplanes off the stage, the awarding is an act of inspired lunacy that's matched only by the prize-winning research itself. As is typical, this year's winners are a mix of scientists being goofy, taking scientific methods to unconventional problems, and real scientific questions that have... unconventional consequences. Without further ado, let's get to them.

Obstetrics: Whose idea was this anyway? Presumably, one of the three Spanish researchers being honored came up with the question that nobody else was asking: would a fetus enjoy music more if it was played in the nearby vagina? To find out, the team played music against the mother's abdomen and from a speaker inserted in her vagina and compared those to vibrations in the vagina. Though there was no discussion of the mother's facial expression during the vibrations, the fetus only responded to intravaginal music, though it had to be older and better developed to do so. Naturally, the team patented an intravaginal speaker and has a product on the market.

Read 10 remaining paragraphs | Comments

Deals of the Day (9-15-2017)

Apple quietly increased the price of some iPad Pro tablets by about $50 this week, possibly as a response to rising flash memory prices. While entry-level models for the 10.5 inch and 12.9 inch iPad Pro models still start at $649 and $799, respectively, you’ll end up paying more if you opt for a model […]

Deals of the Day (9-15-2017) is a post from: Liliputing

Apple quietly increased the price of some iPad Pro tablets by about $50 this week, possibly as a response to rising flash memory prices. While entry-level models for the 10.5 inch and 12.9 inch iPad Pro models still start at $649 and $799, respectively, you’ll end up paying more if you opt for a model […]

Deals of the Day (9-15-2017) is a post from: Liliputing

8,500 Verizon customers disconnected because of “substantial” data use

Roaming data use makes customers unprofitable, so Verizon will cut them off.

Enlarge (credit: Verizon)

Verizon is disconnecting another 8,500 rural customers from its wireless network, saying that roaming charges have made certain customer accounts unprofitable for the carrier.

The 8,500 customers have 19,000 lines and live in 13 states (Alaska, Idaho, Iowa, Indiana, Kentucky, Maine, Michigan, Missouri, Montana, North Carolina, Oklahoma, Utah, and Wisconsin), a Verizon Wireless spokesperson told Ars today. They received notices of disconnection this month and will lose access to Verizon service on October 17.

"These customers live outside of areas where Verizon operates our own network," Verizon said. "Many of the affected consumer lines use a substantial amount of data while roaming on other providers’ networks and the roaming costs generated by these lines exceed what these consumers pay us each month."

Read 16 remaining paragraphs | Comments

Here’s a real-life, slimy example of Uber’s regulator-evading software

“In using Greyball, Uber has sullied its own reputation,” Portland says.

Enlarge (credit: Adam Berry/Getty Images)

We reported back in May that the Justice Department had commenced a criminal investigation into Uber's use of a software tool that helped drivers evade picking up local officials in places where the service had not been approved.

Portland, Oregon, was one of the cities we mentioned where Uber employed the so-called "Greyball" tool. The city has now released a scathing report detailing that Uber evaded picking up 16 local officials for a ride before April 2015, when the service finally won approval by Portland regulators.

The Greyball software employs a dozen data points on a new user in a given market, including whether a rider's Uber app is opened repeatedly in or around municipal offices, which credit card is linked to the account, and any publicly available information about the new user on social media. If the data suggests the new user is a regulator in a market where Uber is not permitted, the company would present that user with false information about where Uber rides are. This includes showing ghost cars or no cars in the area.

Read 4 remaining paragraphs | Comments

Is this the Lenovo ThinkPad 25th anniversary edition?

Lenovo is planning to launch a 25th-anniversary ThinkPad laptop soon, and signs point to it being a notebook with classic ThinkPad design elements and modern specs. In fact, it may even be part of the company’s current ThinkPad T470 family. But as for the design? We already knew it’d probably have a retro-style colorful ThinkPad […]

Is this the Lenovo ThinkPad 25th anniversary edition? is a post from: Liliputing

Lenovo is planning to launch a 25th-anniversary ThinkPad laptop soon, and signs point to it being a notebook with classic ThinkPad design elements and modern specs. In fact, it may even be part of the company’s current ThinkPad T470 family. But as for the design? We already knew it’d probably have a retro-style colorful ThinkPad […]

Is this the Lenovo ThinkPad 25th anniversary edition? is a post from: Liliputing