Tourist, 63, airlifted to hospital after shark attack while spearfishing in the Bahamas
The 63-year-old, who has not been named, was attacked on Abaco island shortly after 1pm on August 17, the Royal Bahamas Police Force said in a statement.
Generative AI isn't just a matter of life and death. It's far more important than that
Visions of immortality are uniformly dull. But this is gonna get ugly
Opinion Real versus virtual. Stolen versus synthesized. Generative AI is blurring the lines we used to think we could read between. Now, it's getting its teeth into life versus death. …
Surfer survives freak close encounter with four-metre shark at Cabarita Beach
A surfer narrowly avoided being bitten in an aggressive shark attack.
What's YOUR phone network doing to stop scam and nuisance calls? We asked all of the biggest providers
Britons are being battered by scam calls, which are becoming more sophisticated thanks to AI - but what are networks doing to prevent this?
Huge fire breaks out at former Southend United training ground with residents told to keep windows shut
Six fire crews were sent to the scene
I'm a fashion editor and these the hottest designer sites to snap up their second-hand style at a snip of their original price - this is exactly what to buy
When it comes to fashion, preloved clothes and accessories have become one of the most enduring trends.
Normal People author Sally Rooney vows to use her BBC royalties to fund terror group Palestine Action
The Normal People author said she would donate earnings from her books and BBC adaptations to the organisation, adding: 'If this makes me a "supporter of terror" under UK law, so be it.'
China's Communist Party is 'behind spate of takeovers' of British private schools - with more than 30 now in hands of foreign investors
A senior government source said China is 'playing the long game' by targeting private schools, adding that the country is 'doing all the things we used to do as an empire'.
Man in his 70s is arrested after mobility scooter driver 'punched in the head'
Northumbria Police were called to reports of a serious assault on Whiteleas Way roundabout in South Shields just before 3.30pm on Saturday.
Lucy Letby 'is under 24-hour guard and has to be checked on every 15 minutes'
The killer nurse is reportedly being checked on every 15 minutes by staff at HMP Bronzefield as part of an enforced Assessment, Care in Custody and Teamwork (ACCT) order.
Trains suspended on major Greater Anglia line after person hit by a train - recap
All lines between two stations were closed
Male-Oriented App 'TeaOnHer' Also Had Security Flaws That Could Leak Men's Driver's License Photos
The women-only dating-advice app Tea "has been hit with 10 potential class action lawsuits in federal and state court," NBC News reported last week, "after a data breach led to the leak of thousands of selfies, ID photos and private conversations online."
The suits could result in Tea having to pay tens of millions of dollars in damages to the plaintiffs, which could be catastrophic for the company, an expert told NBC News... One of the suits lists the right-wing online discussion board 4chan and the social platform X as defendants, alleging that they allowed bad actors to spread users' personal information.
But meanwhile, a new competing app for men called "TeaOnHer" has already been launched. And it was also found to have enormous security flaws, reports TechCrunch, that "exposed its users' personal information, including photos of their driver's licenses and other government-issued identity documents..."
[W]hen we looked at the TeaOnHer's public internet records, it had no meaningful information other than a single subdomain, appserver.teaonher.com. When we opened this page in our browser, what loaded was the landing page for TeaOnHer's API (for the curious, we uploaded a copy here)... It was on this landing page that we found the exposed email address and plaintext password (which wasn't that far off from "password") for [TeaOnHer developer Xavier] Lampkin's account to access the TeaOnHer "admin panel"... This API landing page included an endpoint called /docs, which contained the API's auto-generated documentation (powered by a product called Swagger UI) that contained the full list of commands that can be performed on the API [including administrator commands to return user data]...
While it's not uncommon for developers to publish their API documentation, the problem here was that some API requests could be made without any authentication — no passwords or credentials were needed...
The records returned from TeaOnHer's server contained users' unique identifiers within the app (essentially a string of random letters and numbers), their public profile screen name, and self-reported age and location, along with their private email address. The records also included web address links containing photos of the users' driver's licenses and corresponding selfies. Worse, these photos of driver's licenses, government-issued IDs, and selfies were stored in an Amazon-hosted S3 cloud server set as publicly accessible to anyone with their web addresses. This public setting lets anyone with a link to someone's identity documents open the files from anywhere with no restrictions...
The bugs were so easy to find that it would be sheer luck if nobody malicious found them before we did. We asked, but Lampkin would not say if he has the technical ability, such as logs, to determine if anyone had used (or misused) the API at any time to gain access to users' verification documents, such as by scraping web addresses from the API. In the days since our report to Lampkin, the API landing page has been taken down, along with its documentation page, and it now displays only the state of the server that the TeaOnHer API is running on as "healthy."
The flaws were discovered while TeaOnHer was the #2 free app in the Apple App Store, the article points out. And while these flaws "appear to be resolved," the article notes a larger issue. "Shoddy coding and security flaws highlight the ongoing privacy risks inherent in requiring users to submit sensitive information to use apps and websites,"
And TeaOnHer also had another authentication issue. A female reporter at Cosmopolitan also noted Friday that TeaOnHer "lets you browse through profiles before your verifications are complete. So literally anyone (like myself) can read reviews..."
Read more of this story at Slashdot.
Adam Collard breaks down in tears as he bravely speaks about fianceé Laura Woods' tragic miscarriage on Celeb SAS
Adam Collard broke down into tears as he spoke about his fianceé Laura Woods' miscarriage on Sunday's episode of Celeb SAS.
Teen interns brute-forced a disk install, with predictable results
The real lesson here is how little some companies care about training
Who, Me? Welcome to Monday and another instalment of Who, Me? It’s The Register’s reader-contributed column in which you admit to mistakes and reveal if they derailed your career.…
Alexa hits snooze on basic functions as alarms and timers KO'd in UK outage
Brits wake to a beeping nightmare as Amazon’s AI assistant forgets how to set – or stop – alarms
Amazon's Alexa is on the fritz, bungling alarms and timers and leaving some UK users trapped in an endless wake-up call.…
A12 partially closed both ways near Colchester due to emergency repairs
One lane is closed on the A12 both ways between Junction 29, A120 Crown Interchange, and Junction 28, Colchester JobServe Stadium.
Olympian outraged after being charged to REMOVE pizza toppings at Italian restaurant
Elena Di Liddo, 31, who has represented Italy on competed in the 2020 Tokyo summer Olympics, took to Instagram to lament her frustrations earlier this week.
3 men arrested after woman murdered in Romford as police step up patrols in the area
Police patrols will be stepped up in the area following the death
Psychiatrist reveals the subtle sign someone may be a psychopath
Dr Sohom Das is a forensic psychiatrist, from London, has revealed two subtle signs that somebody may be a psychopath.
Body language expert reveals moment that proved Meghan Markle was never going to fall in line with royal protocol - and that Prince Harry was more than willing to let her take the lead
Just over a month ahead of the royal wedding, Meghan Markle joined Prince Harry to meet youth delegates taking part in the Commonwealth Heads of Government Meeting (CHOGM) in London.