Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror

Submission + - Trump Admin accidentially texted top-secret Yemen war plans to journalist (theguardian.com) 2

fahrbot-bot writes: The Guardian (and others) is reporting that a reporter at The Atlantic was accidentally included in a group text on Signal that discussed upcoming military strikes in Yemen by National Security Advisor Mike Waltz.

Senior members of Donald Trump’s cabinet have been involved in a serious security breach while discussing secret military plans for recent US attacks on the Houthi armed group in Yemen.

In an extraordinary blunder, key figures in the Trump administration – including the vice-president, JD Vance, the defence secretary Pete Hegseth, the secretary of state, Marco Rubio, and the director of national intelligence, Tulsi Gabbard – used the commercial chat app Signal to convene and discuss plans – while also including a prominent journalist in the group.

Signal is not approved by the US government for sharing sensitive information.

Others in the chat included the Trump adviser Stephen Miller; Trump’s chief of staff, Susie Wiles; and the key Trump envoy Steve Witkoff.

The breach was revealed in an Atlantic article published on Monday by Jeffrey Goldberg, the editor of the Atlantic magazine, who discovered that he had been included in a Signal chat called “Houthi PC Small Group” and realizing that 18 other members of the group included Trump cabinet members.

Donald Trump told reporters at the White House that he was unaware of the incident, saying, “I don’t know anything about it. I’m not a big fan of the Atlantic.” [Which kind of misses the point.]

Submission + - GPS Interference Now a Major Flight Safety Concern For Airline Industry (theregister.com)

An anonymous reader writes: Europe's aviation safety body is working with the airline industry to counter a danger posed by interference with GPS signals — now seen as a growing threat to the safety of air travel. The European Union Aviation Safety Agency (EASA) and the International Air Transport Association (IATA) held a recent workshop on incidents where people spoofed and jammed satellite navigation systems, and concluded these pose a "significant challenge" to safety. Mitigating the risks posed by such actions will require measures to be enacted in the short term as well as medium and long term timescales, the two bodies said. They want to start by sharing information about the incidents and any potential remedies.

In Europe, this information sharing will occur through the European Occurrence Reporting scheme and EASA's Data4Safety program. Given the global nature of the problem, a broader solution would be better, but this would have to be pursued at a later date, EASA said. Inevitably, another of the measures involves retaining traditional navigation aids to ensure there is a conventional backup for GNSS navigation, while a third calls for guidance from aircraft manufacturers to airlines and other aircraft operators to ensure they know how to manage jamming and spoofing situations. As a further measure, EASA said it will inform all relevant stakeholders, which includes airlines, air navigation service providers, airports and the air industry, about recorded incidents.

Interference with global navigation systems can take one of two forms: jamming requires nothing more than transmitting a radio signal strong enough to drown out those from GPS satellites, while spoofing is more insidious and involves transmitting fake signals that fool the receiver into calculating its position incorrectly. According to EASA, jamming and spoofing incidents have increasingly threatened the integrity of location services across Eastern Europe and the Middle East in recent years. [...] The IATA said that coordinated action is needed, including sharing of safety data and a commitment from nations to retain traditional navigation systems as backup.

Submission + - Flawed analysis: How Boeing, FAA certified the 737 MAX flight control system (seattletimes.com) 1

0x2A writes: Federal Aviation Administration managers pushed its engineers to delegate wide responsibility for assessing the safety of the 737 MAX to Boeing itself. But safety engineers familiar with the documents shared details that show the analysis included crucial flaws.
The Seattle Times reports leaked statements from engineers, that show crucial safety flaws in the MCAS system not being addressed in the certification of the plane

Submission + - The Poor Man's Air Force? Rebel Drones Attack Russia's Airbase in Syria (bellingcat.com)

0x2A writes: Bellingcat reports on drone attacks on a Russian airbase in Syria: On the night of the 6 January 2018, the Russian airbase at Khmeimim was reportedly attacked. Videos and rumours from the airbase claimed that this attack may have included drones, although there were also reports the base coming under attack by rockets.
Russia has all but accused the U.S. military of being behind the improvised drone attack on its air base in Syria last week, claiming the aircraft could have only come from a major military power like the United States

Submission + - How to Hack a BMW. Details on the security flaw that affected 2.2 million cars (heise.de)

0x2A writes: BMW recently fixed a security hole in their ConnectedDrive software, which left 2.2 million cars open to remote attacks. Security expert Dieter Spaar reverse engineered the system and found some serious flaws, including using the same symmetric keys in all vehicles, not encrypting messages between the car and the BMW backend or using the outdated DES.

Submission + - AirAsia QZ8501 Black Box Found (channelnewsasia.com)

jones_supa writes: Indonesia's Directorate General of Marine Transport has confirmed that the black box of AirAsia QZ8501 has been found, Indonesian authorities said in a press release. The breakthrough comes exactly two weeks after the flight from Surabaya to Singapore went down with 162 people on board. In the press release, marine transport coordinator Tonny Budiono said that the credit goes to navy divers from Indonesia navy ship KN Jadayat, who found the black box at a depth of 30 to 32 meters. The black box is currently wedged between pieces of wreckage making it difficult for divers to retrieve, and due to time constraints, the actual retrieval will take place on Monday morning.

Submission + - SpaceX Rocket Landing Test Crashes After Successful Cargo Launch (space.com)

0x2A writes: A Falcon 9 rocket built by SpaceX successfully launched a Dragon cargo ship toward the International Space Station early Saturday— and then returned to Earth, apparently impacting its target ocean platform during a landing test in the Atlantic.
"Rocket made it to drone spaceport ship, but landed hard. Close, but no cigar this time. Bodes well for the future tho," Elon Musk tweeted shortly after the launch.

News

Cocaine Test Prompts Red Bull Removal In Germany 290

viyh writes to mention that six German states have mandated pulling Red Bull Cola energy drinks off the shelves after testing found trace amounts of cocaine in the drink. "Germany's Federal Institute for Risk Assessment said Monday that the cocaine level was too low to pose a health risk. It planned to produce a more detailed report Wednesday. Red Bull said its cola is 'harmless and marketable in both the US and Europe.' It said similar coca leaf extracts are used worldwide as flavoring, and a test it commissioned itself found no cocaine traces."
Image

Smile! Urine Candid Camera! 370

Anon E. Muss writes "Just because you can put a camera somewhere doesn't mean you should. Apparently, the Department of Homeland Security doesn't grasp this concept. They've installed video cameras in urinals at Houston's Hobby Airport. At least they weren't sneaky about it — they posted a notice saying 'Automatic infrared flush sensors also provide video monitoring for security purposes.' (Insert bad joke about bashful bladder syndrome here)."
Security

Submission + - How To Steal Cars - Breaking a Car's Cipher

An anonymous reader writes: KeeLoq is a cipher used in several car anti-theft mechanisms distributed by Microchip Technology Inc. It may protect your car if you own a Chrysler, Daewoo, Fiat, General Motors, Honda, Toyota, Volvo, Volkswagen, or a Jaguar. The cipher is included in the remote control device that opens and locks your car and that controls the anti-theft mechanisms.

The 64-bit key block cipher was widely believed to be secure. In a recent research, a method to identify the key in less than a day was found. The attack requires access for about 1 hour to the remote control (for example, while it is stored in your pocket). The attacker than runs the implemented software, finds the secret cryptographic key, and drives away in your car after copying the key.

More info at: http://www.cosic.esat.kuleuven.be/keeloq/

Slashdot Top Deals

Take everything in stride. Trample anyone who gets in your way.

Working...