Republicans

GOP Senators' New Bill Would Let ISPs Sell Your Web Browsing Data (arstechnica.com) 300

Yesterday, Sen. Jeff Flake (R-Ariz.) and 23 Republican co-sponsors introduced a resolution that would overturn new privacy rules for internet service providers. "If the Federal Communications Commission rules are eliminated, ISPs would not have to get consumers' explicit consent before selling or sharing web browsing data and other privacy information with advertisers and other third parties," reports Ars Technica. "The measure would use lawmakers' power under the Congressional Review Act to ensure that the FCC rulemaking 'shall have no force or effect.' The resolution would also prevent the FCC from issuing similar regulations in the future." From the report: Flake's announcement said he's trying to "protect consumers from overreaching Internet regulation." Flake also said that the resolution "empowers consumers to make informed choices on if and how their data can be shared," but he did not explain how it will achieve that. The privacy order had several major components. The requirement to get the opt-in consent of consumers before sharing information covered geo-location data, financial and health information, children's information, Social Security numbers, Web browsing history, app usage history, and the content of communications. This requirement is supposed to take effect on December 4, 2017. The rulemaking had a data security component that required ISPs to take "reasonable" steps to protect customers' information from theft and data breaches. This was supposed to take effect on March 2, but the FCC under newly appointed Chairman Ajit Pai halted the rule's implementation. Another set of requirements related to data breach notifications is scheduled to take effect on June 2. Flake's resolution would prevent all of those requirements from being implemented. He said that this "is the first step toward restoring the [Federal Trade Commission's] light-touch, consumer-friendly approach." Giving the FTC authority over Internet service providers would require further FCC or Congressional action because the FTC is not allowed to regulate common carriers, a designation currently applied to ISPs.
Crime

Federal Criminal Probe Being Opened Into WikiLeaks' Publication of CIA Documents (cnn.com) 236

A federal criminal investigation is being opened into WikiLeaks' publication of documents detailing alleged CIA hacking operations, CNN reports citing several U.S. officials. From the report: The officials said the FBI and CIA are coordinating reviews of the matter. The investigation is looking into how the documents came into WikiLeaks' possession and whether they might have been leaked by an employee or contractor. The CIA is also trying to determine if there are other unpublished documents WikiLeaks may have. The documents published so far are largely genuine, officials said, though they are not yet certain if all of them are and whether some of the documents may have been altered. One of the biggest concerns for the federal government is if WikiLeaks publishes critical computer code on how operations are conducted, other hackers could take that code and cause havoc overseas. Security expert Robert Graham, wrote on Tuesday: The CIA didn't remotely hack a TV. The docs are clear that they can update the software running on the TV using a USB drive. There's no evidence of them doing so remotely over the Internet. The CIA didn't defeat Signal/WhatsApp encryption. The CIA has some exploits for Android/iPhone. If they can get on your phone, then, of course they can record audio and screenshots. Technically, this bypasses/defeats encryption -- but such phrases used by Wikileaks are highly misleading, since nothing related to Signal/WhatsApp is happening. [...] This hurts the CIA a lot. Already, one AV researcher has told me that a virus they once suspected came from the Russians or Chinese can now be attributed to the CIA, as it matches the description perfectly to something in the leak. We can develop anti-virus and intrusion-detection signatures based on this information that will defeat much of what we read in these documents. This would put a multi-year delay in the CIA's development efforts. Plus, it'll now go on a witch-hunt looking for the leaker, which will erode morale.
Businesses

Big Tech Lobbying Is On the Verge of Killing Right To Repair Legislation In Minnesota (vice.com) 136

Jason Koebler, writing for Motherboard: Statehouse employees in Minnesota say that lobbying efforts by big tech companies and John Deere are on the verge of killing right to repair legislation in the state that would have made it easier for consumers and small businesses to fix their electronics. According to two of the bill's sponsors, the bill, which would have introduced "fair repair" requirements for manufacturers in the state, will not get a hearing that's necessary to move the legislation forward. Minnesota Senate rules automatically kills any bills that do not have a hearing scheduled by a certain date (this year, it's March 10). Last year, tech industry lobbying killed a similar bill in New York. "Unfortunately, it's not going to make deadline this session," Republican Sen. David Osmek, one of the sponsors, told me in an email. Osmek would not give additional specifics about his colleagues' concerns with the bill, but a legislative assistant for the bill's other sponsor told me that electronic manufacturer lobbying is likely to blame, while another source close to the legislature told me that tractor manufacturer John Deere -- a long time enemy of fair repair -- helped kill the bill as well.
Communications

Trump Renominates Ajit Pai For Five More Years at the FCC (theverge.com) 57

According to Axios, Bloomberg, and several other publications, President Trump has nominated FCC chairman Ajit Pai for a second five-year term at the commission. "Pai's current term ended last June, though he's been able to stick around through the end of the year even without reconfirmation," reports The Verge. From the report: The nomination comes just days after Pai sat down with the president for a meeting, during which they're said to have "reconnected" but without actually discussing anything the commission is actively considering. Pai will need confirmation from the Senate for the nomination to be approved. He was first nominated in 2012 to fill the slot of a commissioner. With approval, he'll be able to stick around through at least the entirety of Trump's current term. The question now is when Trump will nominate people to fill the two slots still vacant at the commission. The FCC remains short staffed, with only three out of five seated leaders, which somewhat limits how quickly Pai is able to get through his agenda.
Businesses

Sprint 'Betting Big On Trump,' Could Merge With T-Mobile Or Comcast (arstechnica.com) 89

An anonymous reader quotes a report from Ars Technica: Speculation that Sprint will merge with T-Mobile USA or another competitor has ramped up since the inauguration of President Donald Trump. That continued Friday when a report from The New York Times suggested that Sprint could be combined with either T-Mobile or Comcast, the nation's largest cable company. Masayoshi Son, founder and CEO of Sprint owner SoftBank, "and his financial advisers are weighing several major possible deals for Sprint," the Times wrote. "Be it a tie-up with T-Mobile U.S., Sprint's closest competitor, or a more ambitious marriage with the cable colossus Comcast, a transaction would allow Mr. Son to fulfill a long-held ambition to invest aggressively in wireless networks in the United States and enable next-generation mobile technology." Titled "The World's Top Tech Investor Is Betting Big on Trump," the Times report says that "the Trump administration's push for lighter regulation and lower taxes has been a powerful lure for cash-rich investors the world over." SoftBank, which is based in Japan, had several of its executives "spen[d] a day in Washington talking to senior members of Mr. Trump's economic team" last month, according to bankers who were briefed on the meetings, the Times report said. U.S. regulators opposed wireless consolidation during the Obama administration, preventing potential mergers between AT&T and T-Mobile and later between Sprint and T-Mobile. With four major nationwide carriers, U.S. wireless competition recently led to an expansion of unlimited data plans.
Government

US Suspends 'Expedited' H-1B Visas (sfgate.com) 295

"Starting April 3, 2017, U.S. Citizenship and Immigration Services will temporarily suspend premium processing for all H-1B petitions," read Friday's announcement, which says the suspension "may last up to 6 months." Slashdot reader elrous0 sees it as part of the "ongoing efforts to curb abuses in the controversial H-1B program." The San Francisco Chronicle reports: While it could be difficult to divorce the move Friday from the Trump administration's broader immigration crackdown, some experts believed the agency's decision to be apolitical. "It has everything to do with an understaffed, overworked, U.S. Citizenship and Immigration Services," said Jason Finkelman, an Austin, Texas, immigration attorney, adding that the wait time for an H-1B visa in California is currently about eight months. However, Vivek Wadhwa, an adjunct professor at Carnegie Mellon University's Silicon Valley campus in NASA Ames Research Center at Moffett Field, said the suspension seems like a message from the government that you "can't buy your way into America."
Whatever the motivation, Engadget believes this will impact large tech companies. "Financial Times quotes a lawyer saying that 'close to 100 percent' of applications from companies like Microsoft utilize the option."
America Online

Mike Pence Used His AOL Email For Indiana State Business -- and It Got Hacked (theverge.com) 445

An anonymous reader quotes a report from The Verge: Vice President Mike Pence used a personal AOL email account to conduct sensitive state business -- including issues related to homeland security -- as the governor of Indiana, according to a report from The Indianapolis Star. Not only that, but Pence's email account was also compromised last year, the report reveals. Because personal email accounts are not subject to same types of public transparency laws, it's up to the official and his or her transition staff to hand over any sensitive state-related messages for archiving. Emails from a state account are automatically stored on state servers and subject to public records requests. Pence's office claims the contents of his personal AOL account used for state business are in fact in the process of being archived. A larger concern, however, is security. By using a private AOL account to conduct sensitive state matters, Pence could have exposed sensitive state business. In the hacking incident last year, Pence's email account was compromised by a scammer who used it to try and extort money from members of his contact list by claiming Pence and his wife were stranded in the Philippines, The Indianapolis Star reports. This hack didn't appear to have had been designed specifically to breach Pence's office, which made clear that his AOL account could be compromised by relatively benign breaching techniques designed by spammers and low-level hackers. It is not illegal in Indiana to own and use a personal account while in office, nor is it against the law to handle work-related matters from a personal account -- so long as those emails are in some way archived. However, the Star reports that Pence made no efforts to preserve his AOL emails under after he left office and is only just now doing months after public records requests were first made. "Similar to previous governors, during his time as governor of Indiana, Mike Pence maintained a state email account and a personal email account," reads a statement given to the The Indianapolis Star. "As governor, Mr. Pence fully complied with Indiana law regarding email use and retention. Government emails involving his state and personal accounts are being archived by the state consistent with Indiana law, and are being managed according to Indiana's Access to Public Records Act."
Privacy

White House Supports Renewal of Spy Law Without Reforms (reuters.com) 61

An anonymous reader quotes a report from Reuters: The Trump administration does not want to reform an internet surveillance law to address privacy concerns, a White House official told Reuters on Wednesday, saying it is needed to protect national security. The announcement could put President Donald Trump on a collision course with Congress, where some Republicans and Democrats have advocated curtailing the Foreign Intelligence Surveillance Act, or FISA, parts of which are due to expire at the end of the year. The FISA law has been criticized by privacy and civil liberties advocates as allowing broad, intrusive spying. It gained renewed attention following the 2013 disclosures by former National Security Agency contractor Edward Snowden that the agency carried out widespread monitoring of emails and other electronic communications. Portions of the law, including a provision known as Section 702, will expire on Dec. 31 unless Congress reauthorizes them. Section 702 enables two internet surveillance programs called Prism and Upstream, classified details of which were revealed by Snowden. Democratic and Republican lawmakers have said reforms to Section 702 are needed, in part to ensure the privacy protections on Americans are not violated. The U.S. House of Representatives' Judiciary Committee met Wednesday to discuss possible changes to the law.
Businesses

NSA Risks Talent Exodus Amid Morale Slump, Trump Fears (reuters.com) 251

Dustin Volz and Warren Strobel, writing for Reuters: The National Security Agency risks a brain-drain of hackers and cyber spies due to a tumultuous reorganization and worries about the acrimonious relationship between the intelligence community and President Donald Trump, according to current and former NSA officials and cybersecurity industry sources. Half-a-dozen cybersecurity executives told Reuters they had witnessed a marked increase in the number of U.S. intelligence officers and government contractors seeking employment in the private sector since Trump took office on Jan. 20. One of the executives, who would speak only on condition of anonymity, said he was stunned by the caliber of the would-be recruits. They are coming from a variety of government intelligence and law enforcement agencies, multiple executives said, and their interest stems in part from concerns about the direction of U.S intelligence agencies under Trump. Retaining and recruiting talented technical personnel has become a top national security priority in recent years as Russia, China, Iran and other nation states and criminal groups have sharpened their cyber offensive abilities. NSA and other intelligence agencies have long struggled to deter some of their best employees from leaving for higher-paying jobs in Silicon Valley and elsewhere.
Businesses

Samsung Chief Charged With Bribery and Embezzlement (npr.org) 22

After a three-month investigation, the acting head of Samsung, Lee Jae-yong, has been charged with bribery and embezzlement in connection with the corruption scandal that led to the impeachment of South Korea's president Park Geun-hye. NPR reports: NPR's Elise Hu reported from Seoul that prosecutors announced the indictment after a three-month investigation: "Samsung acting head Lee Jae-Yong got ensnared after documents showed Samsung funneled some $36 million to the president's close confidant. Prosecutors say the money was paid to win government support of a controversial 2015 company merger. The merger did go through, after a vote of support from the government. In a statement, Samsung says it has not paid bribes or made improper requests to the government. Lee is currently in jail awaiting further proceedings in his case." Lee was arrested on Feb. 17, two months after President Park Geun-hye was impeached over allegations of corruption, influence-peddling and cult ties, as we reported. Those corruption allegations were directly tied to the charges brought against Lee, who also goes by the name Jay Y. Lee.
AT&T

FCC Chairman Says His Agency Won't Review AT&T's Time Warner Purchase (engadget.com) 104

Today, FCC commissioner Ajit Pai confirmed that his agency would not review AT&T's Time Warner purchase, clearing the way for the Justice Department to likely approve the deal. Engadget reports: Last month, AT&T revealed how it might structure its deal to acquire Time Warner without having to go through FCC review. The communications giant noted that it "anticipated that Time Warner will not need to transfer any of its FCC licenses ... after the closing of the transaction." That means that the FCC wouldn't need to review the transaction. "That is the regulatory hook for FCC review," Pai said in an interview with The Wall Street Journal. "My understanding is that the deal won't be presented to the commission." The WSJ notes that this would leave the Justice Department as the only governmental agency reviewing the potential deal. Time Warner has said that it has "dozens" of FCC licenses, but the company believes those won't need to be transferred to AT&T as part of the merger, thus keeping the FCC out of the deal. The report notes that the deal still might not go through even if the FCC won't review the transaction. There's a lot of opposition to it from consumer advocacy groups, and President Donald Trump has said he opposes the deal.
Canada

Canada's Top Mountie Issues Blistering Memo On IT Failures (www.cbc.ca) 116

Reader Freshly Exhumed writes: RCMP Commissioner Bob Paulson has levelled a blistering memo obtained by the CBC on how critical IT failures have increased by 129 per cent since Shared Services Canada took over tech support for the entire government five years ago. Not only that, the memo says, the duration of each outage has increased by 98 per cent. "Its 'one size fits all' IT shared services model has negatively impacted police operations, public and officer safety and the integrity of the criminal justice system," reads the memo. A list of specific incidents includes an 11-hour network computer outage on Jan. 18 that downed every Mountie's BlackBerry, affected dispatching, and prevented the RCMP and 240 other police forces from accessing the Canadian Police Information Centre database.
Government

FCC To Halt Rule That Protects Your Private Data From Security Breaches (arstechnica.com) 119

According to Ars Technica, "The Federal Communications Commission plans to halt implementation of a privacy rule that requires ISPs to protect the security of its customers' personal information." From the report: The data security rule is part of a broader privacy rulemaking implemented under former Chairman Tom Wheeler but opposed by the FCC's new Republican majority. The privacy order's data security obligations are scheduled to take effect on March 2, but Chairman Ajit Pai wants to prevent that from happening. The data security rule requires ISPs and phone companies to take "reasonable" steps to protect customers' information -- such as Social Security numbers, financial and health information, and Web browsing data -- from theft and data breaches. The rule would be blocked even if a majority of commissioners supported keeping them in place, because the FCC's Wireline Competition Bureau can make the decision on its own. That "full commission vote on the pending petitions" could wipe out the entire privacy rulemaking, not just the data security section, in response to petitions filed by trade groups representing ISPs. That vote has not yet been scheduled. The most well-known portion of the privacy order requires ISPs to get opt-in consent from consumers before sharing Web browsing data and other private information with advertisers and other third parties. The opt-in rule is supposed to take effect December 4, 2017, unless the FCC or Congress eliminates it before then. Pai has said that ISPs shouldn't face stricter rules than online providers like Google and Facebook, which are regulated separately by the Federal Trade Commission. Pai wants a "technology-neutral privacy framework for the online world" based on the FTC's standards. According to today's FCC statement, the data security rule "is not consistent with the FTC's privacy standards."
Communications

FCC Votes To Lift Net Neutrality Transparency Rules For Smaller Internet Providers (theverge.com) 115

The Federal Communications Commission today voted to lift transparency requirements for smaller internet providers. According to The Verge, "Internet providers with fewer than 250,000 subscribers will not be required to disclose information on network performance, fees, and data caps, thanks to this rule change. The commission had initially exempted internet providers with fewer than 100,000 subscribers with the intention of revisiting the issue later to determine whether a higher or lower figure was appropriate." From the report: The rule passed in a 2-1 vote, with Republicans saying the reporting requirements unfairly burdened smaller ISPs with additional work. Only Democratic commissioner Mignon Clyburn opposed. Clyburn argued that the disclosures were an important consumer protection that was far from overbearing on businesses, particularly ones this large. Clyburn also argued that the rule would allow larger internet providers to avoid disclosing information by simply breaking their service areas up into different subsidiaries. Republican commissioner Michael O'Rielly voted in favor of the change, saying he actually would have preferred the subscriber exemption to be even higher. And commission chairman Ajit Pai said the rules were necessary to protect "mom and pop internet service providers" from "burdensome requirements [...] that impose serious and unnecessary costs."
Facebook

'Social Media Needs A Travel Mode' (idlewords.com) 144

Maciej CegÅowski, a Polish-American web developer, entrepreneur, and social critic, writes on a blog post: We need a 'trip mode' for social media sites that reduces our contact list and history to a minimal subset of what the site normally offers. Not only would such a feature protect people forced to give their passwords at the border, but it would mitigate the many additional threats to privacy they face when they use their social media accounts away from home. Both Facebook and Google make lofty claims about user safety, but they've done little to show they take the darkening political climate around the world seriously. A 'trip mode' would be a chance for them to demonstrate their commitment to user safety beyond press releases and anodyne letters of support. What's required is a small amount of engineering, a good marketing effort, and the conviction that any company that makes its fortune hoarding user data has a moral responsibility to protect its users. To work effectively, a trip mode feature would need to be easy to turn on, configurable (so you can choose how long you want the protection turned on for) and irrevocable for an amount of time chosen by the user once it's set. There's no sense in having a 'trip mode' if the person demanding your password can simply switch it off, or coerce you into switching it off.
The Almighty Buck

The Only Thing, Historically, That's Curbed Inequality: Catastrophe (theatlantic.com) 516

ColdWetDog writes: The Atlantic has an interesting article on how societies have decreased economic equality. From the report: "Calls to make America great again hark back to a time when income inequality receded even as the economy boomed and the middle class expanded. Yet it is all too easy to forget just how deeply this newfound equality was rooted in the cataclysm of the world wars. The pressures of total war became a uniquely powerful catalyst of equalizing reform, spurring unionization, extensions of voting rights, and the creation of the welfare state. During and after wartime, aggressive government intervention in the private sector and disruptions to capital holdings wiped out upper-class wealth and funneled resources to workers; even in countries that escaped physical devastation and crippling inflation, marginal tax rates surged upward. Concentrated for the most part between 1914 and 1945, this 'Great Compression' (as economists call it) of inequality took several more decades to fully run its course across the developed world until the 1970s and 1980s, when it stalled and began to go into reverse. This equalizing was a rare outcome in modern times but by no means unique over the long run of history. Inequality has been written into the DNA of civilization ever since humans first settled down to farm the land. Throughout history, only massive, violent shocks that upended the established order proved powerful enough to flatten disparities in income and wealth. They appeared in four different guises: mass-mobilization warfare, violent and transformative revolutions, state collapse, and catastrophic epidemics. Hundreds of millions perished in their wake, and by the time these crises had passed, the gap between rich and poor had shrunk."

Slashdot reader ColdWetDog notes: "Yep, the intro is a bit of a swipe at Trump. But this should get the preppers and paranoids in the group all wound up. Grab your foil! Run for the hills!"

Government

Wyden To Introduce Bill To Prohibit Warrantless Phone Searches At Border (onthewire.io) 193

Trailrunner7 quotes a report from On the Wire: A senator from Oregon who has a long track record of involvement on security and privacy issues says he plans to introduce a bill soon that would prevent border agents from forcing Americans returning to the country to unlock their phones without a warrant. Sen. Ron Wyden said in a letter to the secretary of the Department of Homeland Security that he is concerned about reports that Customs and Border Patrol agents are pressuring returning Americans into handing over their phone PINs or using their fingerprints to unlock their phones. DHS Secretary John Kelly has said that he's considering the idea of asking visitors for the login data for their various social media accounts, information that typically would require a warrant to obtain. "Circumventing the normal protection for such private information is simply unacceptable," Wyden said in the letter, sent Monday. "There are well-established procedures governing how law enforcement agencies may obtain data from social media companies and email providers. The process typically requires that the government obtain a search warrant or other court order, and then ask the service provider to turn over the user's data."
Android

Congressman Calls For Probe Into Trump's Unsecured Android Phone (cnet.com) 507

An anonymous reader quotes a report from CNET: President Donald Trump regularly makes news because of his tweets. Now a congressman is making news because of the device the president reportedly uses to tweet. On Friday, Congressman Ted Lieu, a Democrat from Los Angeles, wrote a letter to the House Oversight Committee requesting an investigation into Trump's cybersecurity practices. In particular, he calls out Trump's apparent decision to keep using his personal Android phone instead of a secured phone the Secret Service issued him for his inauguration. The letter is also signed by 14 other members of Congress and calls for a public hearing to discuss the issues. "The device President Trump insists on using -- most likely the Samsung Galaxy S3 -- has particularly well documented vulnerabilities," the letter says. "The use of an unsecured phone risks the president of the United States being monitored by foreign or domestic adversaries, many of whom would be happy to hijack the president's prized Twitter account causing disastrous consequences for global security. Cybersecurity experts universally agree that an ordinary Android smartphone, which the president is reportedly using despite repeated warnings from the Secret Service, can be easily hacked."
The Almighty Buck

Accenture To Create 15,000 Jobs In US (reuters.com) 202

Accenture said on Friday it would create 15,000 "highly skilled" new jobs in the United States, as IT services firms brace for a more protectionist U.S. technology visa program under President Donald Trump. From a report on Reuters: The company, which is domiciled in Dublin, Ireland, said the new jobs would increase the company's U.S. workforce by 30 percent to more than 65,000 by the end of 2020. Accenture has more than 394,000 employees, of which about 140,000 are in India. IT services companies have come under the spotlight after Trump said that his administration would focus on creating more jobs for U.S. workers, who had been affected by the outsourcing of jobs abroad. Major IT service companies, particularly those based in India, fly engineers to the United States using H-1B visas to service clients, but some opponents argue they are misusing the visa program to replace U.S. jobs.
Businesses

Samsung Chief Lee Arrested In Corruption Investigation (reuters.com) 24

According to Reuters, Samsung chief Jay Y. Lee was arrested on Friday over his alleged role in a corruption scandal that led parliament to impeach South Korean President Park Geun-hye. From the report: The 48-year-old Lee, vice chairman of Samsung Electronics Co Ltd (005930.KS), was taken into custody at the Seoul Detention Centre, where he had awaited the court's decision following a day-long, closed-door hearing that ended on Thursday evening. The judge's decision was announced at about 5:30 a.m. (2030 GMT) on Friday, more than 10 hours after Lee, the sprawling conglomerate's third-generation leader, had left the court. The same court rejected a request from prosecutors last month to arrest Lee. On Tuesday, the special prosecutor's office had requested a warrant to arrest him and another executive, Samsung Electronics president Park Sang-jin, on bribery and other charges. The prosecution said it had secured additional evidence and brought more charges against Lee in the latest warrant request. While Lee's detention is not expected to hamper day-to-day operation of Samsung Group companies, which are run by professional managers, experts have said it could affect strategic decision-making by South Korea's biggest conglomerate. Prosecutors have focused their investigations on Samsung's relationship with Park, 65, who was impeached by parliament in December and has been stripped of her powers while the Constitutional Court decides whether to uphold her impeachment. They accused Samsung of paying bribes totaling 43 billion won ($37.74 million) to organizations linked to Choi to secure the government's backing for a merger of two Samsung units. That funding includes Samsung's sponsorship of the equestrian career of Choi's daughter, who is in detention in Denmark, having been on a South Korean wanted list.

Slashdot Top Deals