Skip to main content

Careless engineer stored recovery codes in plaintext, got whole org pwned

1 month 3 weeks ago
Cautionary tale from the recent SonicWall attacks

Failing to encrypt sensitive data leaves you wide open to attack. During the recent SonicWall attack spree, intruders bypassed multi-factor authentication (MFA) in at least one case, because a user's recovery codes were left sitting in a plaintext file on their desktop.…

Jessica Lyons

President Calls for Six-Month Corporate Reporting Cycle, Citing Cost Savings

1 month 3 weeks ago
President Donald Trump called Monday for companies to report earnings every six months instead of quarterly. Trump posted on social media that semi-annual reporting would save money and let managers focus on running companies. The SEC mandated quarterly reports in 1970. Trump made similar comments in 2018 that prompted SEC public comment but no regulatory changes. Critics argue quarterly reporting increases costs and encourages short-term thinking. Supporters say frequent disclosures maintain investor trust and reduce market manipulation risks. Further reading: The Renewed Bid To End Quarterly Earnings Reports.

Read more of this story at Slashdot.

msmash

Engineer turned a vape into a web server

1 month 3 weeks ago
Breathe deep on internet fumes

Discarded vapes are becoming the new cigarette butts in pollution terms, but a hacker has found a novel way to repurpose the chips they contain to build a web server.…

Iain Thomson

Toxic Fumes Are Leaking Into Airplanes, Sickening Crews and Passengers

1 month 3 weeks ago
Toxic fumes from jet engines are leaking into aircraft cabins at an accelerating rate, reaching 108 incidents per million departures in 2024 compared to 12 in 2014, a Wall Street Journal investigation found. The fumes contain neurotoxins and carbon monoxide that have caused brain injuries in crew members. JetBlue flight attendant Florence Chesson suffered permanent neurological damage after inhaling engine oil vapors in 2018, diagnosed by neurologists as equivalent to an NFL linebacker's concussion. The surge is driven by Airbus A320 aircraft, particularly the A320neo model introduced in 2016. WSJ reports Airbus loosened maintenance requirements under airline pressure despite knowing the changes would increase incidents. The FAA received over 700 fume event reports from major U.S. airlines in 2024. Most commercial jets except Boeing's 787 use a "bleed air" system that pulls cabin air through engines.

Read more of this story at Slashdot.

msmash

Half of tech firms plotting restructures as AI hype bites

1 month 3 weeks ago
Study also finds M&A and changes to operating model on the way for sector

More than half of tech companies are considering a complete restructure or changing their operating model in response to AI, according to research from the consulting sector.…

Lindsay Clark

A Third of UK Firms Using 'Bossware' To Monitor Workers' Activity, Survey Reveals

1 month 3 weeks ago
A third of UK employers are using "bossware" technology to track workers' activity with the most common methods including monitoring emails and web browsing. From a report: Private companies are most likely to deploy in-work surveillance and one in seven employers are recording or reviewing screen activity, according to a UK-wide survey that estimates the extent of office snooping. The findings, shared with the Guardian by the Chartered Management Institute (CMI), are based on responses from hundreds of UK managers and suggest there has been a recent growth in computerised work surveillance. In 2023, less than a fifth of people thought they were being monitored by an employer, the Information Commissioner's Office (ICO) found. The finding that about a third of managers report their organisations are monitoring workers' online activities on employer-owned devices is probably an underestimate, as roughly the same proportion said they don't know what tracking their organisations do. Many monitoring systems are aimed at preventing insider threats and safeguarding sensitive information as well as detecting productivity dips. But the trend appears to be causing unease. A large minority of managers are opposed to the practice, saying it undermines trust with staff and invades their personal privacy, the CMI found.

Read more of this story at Slashdot.

msmash