This Week’s [in]Security – Issue 150 | insecurity | Control Gap

Welcome to This Week’s [in]Security. Trending: Huawei and Crypto AG, Coronavirus, and Election insecurity. Breaches: 2 mega breaches - 440M+ records, , 9 smaller breaches, and plastic surgery photos, 15B records breached in 2019, China breached Equifax. More ransomware Evolution, Avast and Facebook Investigations. Bad Chrome, Police AI and facial recognition. US Data Protection, UK Content regulation, CCPA changes, Robocall revenge app, Signal, Fighting disinformation, Protecting data lakes, How not to get hacked, Upcoming conferences. Chinese IoT firmware backdoor, Shadow IT, Patch Tuesday problems, Rapid rise in Mac malware, Hacking fallout, CRA Scammer arrest, FBI cyber-crime warnings, The journalism attack-surface, Looking back on predictions for 2020, Healthcare cyber-insecurity. AI hilarity. And more.

Now here's this week’s selection of news, opinions, and research. Quickly skim annotated links organized by topic: compliance and payment security, breaches, regulation, bugs, privacy, hacking/malware, other security & risk, and more. We hope you enjoy and find them useful.

New - Emerging Issues and Trending Stories

This special section is dedicated to emerging issues and trending stories that cross multiple of our regular news categories.

• Several developments in the Crypto-wars Huawei backdoors, NSA Crypto AG backdoors, and Lawful Access push highlights US NOBUS ( Nobody But US) policy reinforces why backdoors are bad:

  • U.S. may have 'Smoking Gun' confirming Huawei-Built Spy Backdoors https://gizmodo.com/it-appears-u-s-has-a-smoking-gun-confirming-huawei-bui-1841613058 and https://www.forbes.com/sites/zakdoffman/2020/02/11/this-is-trumps-stunning-huawei-smoking-gun-revelation-heres-why-its-complicated/
  • The US says Huawei has been spying through 'backdoors' designed for law enforcement https://www.businessinsider.com/us-accuses-huawei-of-spying-through-law-enforcement-backdoors-2020-2
  • Huawei: US issues new charges of racketeering and theft https://www.bbc.co.uk/news/business-51497460
  • CIA Secretly Owned Global Encryption Provider, Built Backdoors, Spied On 100+ Foreign Governments https://www.forbes.com/sites/daveywinder/2020/02/12/cia-secretly-bought-global-encryption-provider-built-backdoors-spied-on-100-foreign-governments/
  • Swiss Crypto AG spying scandal shakes reputation for neutrality https://www.bbc.co.uk/news/world-europe-51487856
  • Crypto AG built cipher machines for countries all over the world - it was owned by the CIA https://www.schneier.com/blog/archives/2020/02/cryptoagwas_o.html, https://www.theregister.co.uk/2020/02/11/cryptoagbackdooredgermanswissnewsallegs/, and https://arstechnica.com/tech-policy/2020/02/us-german-intel-owned-swiss-crypto-used-by-dozens-of-countries/
  • 2008 article on the Crypto AG backdoors https://www.schneier.com/blog/archives/2008/01/nsabackdoorsi.html
  • (Updated to add) 2017 article on NOBUS in context of the Wannacry[pt] malware https://www.schneier.com/essays/archives/2017/05/whythensamakesus.html
  • A Technical Autopsy of the Apple - FBI Debate Using iPhone Forensics https://www.sans.org/blog/a-technical-autopsy-of-the-apple-fbi-debate-using-iphone-forensics
  • WhatsApp seized on US allegations against Huawei to defend encryption against the government's demands for backdoors https://www.businessinsider.com/whatsapp-defends-encryption-us-huawei-backdoor-allegations-2020-2

• Coronavirus updates:

  • COVID-19: New coronavirus given name by World Health Organization https://globalnews.ca/news/6535635/coronavirus-name-covid19/
  • Reality check: Why 15K new cases of COVID-19 doesn’t mean the outbreak is exploding https://globalnews.ca/news/6547182/china-covid-19-outbreak-testing/
  • Confirmed Cases Of COVID-19 Soar On Quarantined Cruise Ship, 218 People Now Test Positive For Coronavirus https://www.forbes.com/sites/victoriaforster/2020/02/12/confirmed-cases-of-covid-19-soar-on-quarantined-cruise-ship-218-people-now-affected/
  • Scientists say at least 500,000 people may become infected with the coronavirus in Wuhan before it peaks in the coming weeks https://www.businessinsider.com/coronavirus-spread-wuhan-scientists-estimate-february-peak-2020-2
  • Coronavirus super-spreaders: Why are they important? https://www.bbc.co.uk/news/health-51447143
  • Interactive map shows worldwide spread of coronavirus https://scienmag.com/interactive-map-shows-worldwide-spread-of-coronavirus/
  • Thermometer guns used to screen for coronavirus are 'notoriously' unreliable https://www.businessinsider.com/thermometer-guns-screening-for-coronavirus-notoriously-not-accurate-2020-2
  • A Bias Goes Viral https://www.forbes.com/sites/davidrock/2020/02/11/a-bias-goes-viral/
  • The coronavirus could cripple China's economy for longer than Wall Street wants to believe https://www.businessinsider.com/china-economic-recovery-wuhan-coronavirus-long-difficult-2020-2
  • Coronavirus Is a Data Time Bomb - implications on the global economy https://www.theatlantic.com/technology/archive/2020/02/coronaviruss-effects-on-global-markets-will-be-delayed/606508/
  • Coronavirus prankster faces five-years' jail for Moscow metro stunt https://www.bbc.co.uk/news/world-europe-51457610

• More election (in)security:

  • Voting on Your Phone: New Elections App Ignites Security Debate https://www.nytimes.com/2020/02/13/us/politics/voting-smartphone-app.html
  • MIT Researchers Find Vulnerabilities in Voatz Voting App https://www.securityweek.com/mit-researchers-find-vulnerabilities-voatz-voting-app
  • Voatz Internet Voting App Is Insecure - the ballot is busted before the blockchain https://www.schneier.com/blog/archives/2020/02/voatzinternet.html
  • Google's Giving Out Security Keys to Help Protect Campaigns https://www.wired.com/story/google-free-security-keys-campaigns/
  • Ransomware Hit a Florida Voting System in 2016 https://www.bankinfosecurity.com/ransomware-hit-florida-voting-system-in-2016-a-13721

PCI Compliance and Payments

News and announcements relating to Payment Security, PCI, Card Brands, Payments, Payment Malware and Fraud.

• The Importance of PCI DSS Vulnerability Management for z/OS https://www.linkedin.com/pulse/importance-pci-dss-vulnerability-management-zos-ray-overby/
• Will Faster Payments Lead To Faster Fraud? https://www.forbes.com/sites/tomgroenfeldt/2020/02/04/will-faster-payments-lead-to-faster-fraud/
• Couple arrested after checking into Hamilton hotel with stolen credit card https://globalnews.ca/news/6547887/hamilton-hotel-stolen-credit-card/
• Self-Checkout Hits A (Small) Speed Bump https://www.pymnts.com/unattended-retail/2020/self-checkout-hits-a-speed-bump/
• TD Bank addresses the evolution of POS https://www.mobilepaymentstoday.com/articles/td-bank-addresses-the-evolution-of-pos/

Breaches / Ransomware / Leaks

Covering breaches, leaks, data exposures, ransomware (as potential breach), and their fallout.

• Estee Lauder Exposed 440 Million Records Online https://www.databreaches.net/estee-lauder-exposed-440-million-records-online-researchers/
• Data of All 6.5 Million Israeli Voters Is Leaked https://www.nytimes.com/2020/02/10/world/middleeast/israel-elector-leak.html and https://www.bankinfosecurity.com/coding-flaw-exposes-voter-details-for-65-million-israelis-a-13708
• Nedbank says 1.7 million customers impacted by breach at third-party provider https://www.zdnet.com/article/nedbank-says-1-7-million-customers-impacted-by-breach-at-third-party-provider/
• Over 70 Rutter's Stores Hit by Payment Card Breach https://www.securityweek.com/over-70-rutters-stores-hit-payment-card-breach and https://www.databreaches.net/pa-rutters-data-breach-impacted-at-least-70-pennsylvania-stores/
• Relation Insurance Discloses Data Security Incident https://www.databreaches.net/relation-insurance-discloses-data-security-incident/
• Passport office had 100 data breaches https://www.irishexaminer.com/breakingnews/ireland/passport-office-had-100-data-breaches-980751.html
• UK: RideLondon organisers apologise after data breach https://www.databreaches.net/uk-ridelondon-organisers-apologise-after-data-breach/
• Personal information belonging to 144,000 Canadians breached by federal departments and agencies https://www.cbc.ca/news/politics/privacy-breach-canada-1.5457502
• Idaho Central Credit Union reports two breaches https://www.databreaches.net/idaho-central-credit-union-reports-two-breaches/
• Hackers compromise financial information for Carson City residents who pay water bill online https://www.databreaches.net/nv-hackers-compromise-financial-information-for-carson-city-residents-who-pay-water-bill-online/
• Data breach exposes Altice employee, Optimum customer information https://www.databreaches.net/data-breach-exposes-altice-employee-optimum-customer-information/
• Former Fifth Third employees stole customer info https://www.databreaches.net/former-fifth-third-employees-stole-customer-info-gave-to-outside-group/
• Plastic Surgery Patient Photos, Info Exposed by Leaky Database https://www.databreaches.net/plastic-surgery-patient-photos-info-exposed-by-leaky-database/
• Report Reveals Worst State for Healthcare Data Breaches in 2019 https://www.infosecurity-magazine.com/news/report-healthcare-data-breaches-in/
• Insider wrongdoing breach results in more than 200 felony counts against former ACM Global Laboratory employee https://www.databreaches.net/ny-insider-wrongdoing-breach-results-in-more-than-200-felony-counts-against-former-acm-global-laboratory-employee/
• Over 15.1 Billion Records Exposed in Data Breaches in 2019 https://www.securityweek.com/over-151-billion-records-exposed-data-breaches-2019
• Chinese military members face charges in Equifax breach impacting Canadians https://beta.ctvnews.ca/national/business/2020/2/10/1_4805070.html
• Insidious New Ransomware Demands Explicit Pictures As Payment https://www.forbes.com/sites/leemathews/2020/02/13/insidious-new-ransomware-demands-explicit-pictures-as-payment/
• Ontario firm, Bird Construction, victim of ransomware attack https://www.itworldcanada.com/article/ontario-construction-firm-victim-of-ransomware-attack/426487
• Healthcare Ransomware Damage Passes $157M Since 2016 https://www.darkreading.com/attacks-breaches/healthcare-ransomware-damage-passes-$157m-since-2016/d/d-id/1337024
• Data Shows 41 Pct Hike In Ransomware Attacks In 2019 https://www.pymnts.com/news/security-and-risk/2020/data-shows-41-pct-hike-in-ransomware-attacks-in-2019/
• Ransomware Hits North Miami Beach Police Department https://www.securityweek.com/ransomware-hits-north-miami-beach-police-department
• Ransomware Attacks Are Causing Cyber Insurance Rates to Go Through the Roof; Premiums up as Much as 25 Percent https://www.databreaches.net/ransomware-attacks-are-causing-cyber-insurance-rates-to-go-through-the-roof-premiums-up-as-much-as-25-percent/
• Why, oh why, don’t some entities respond to notifications about leaking patient data https://www.databreaches.net/why-oh-why-dont-some-entities-respond-to-notifications-about-leaking-patient-data-wednesday-edition/
• Patient Lawsuits for HIPAA-Related Breaches https://www.databreaches.net/patient-lawsuits-for-hipaa-related-breaches/
• Potential class action lawsuits filed against two more ransomware victims https://www.databreaches.net/potential-class-action-lawsuits-filed-against-two-more-ransomware-victims/

Privacy

Articles about privacy related news, risks, and trends.

• Avast Under Investigation by Czech Privacy Agency https://www.darkreading.com/vulnerabilities---threats/avast-under-investigation-by-czech-privacy-agency/d/d-id/1337036
• Facebook's Privacy Practices Targeted by Canadian Regulator https://www.bankinfosecurity.com/canada-seeks-to-force-facebook-to-make-privacy-changes-a-13704
• Over 500 Chrome Extensions Secretly Uploaded Private Data https://arstechnica.com/information-technology/2020/02/500-chrome-extensions-secretly-uploaded-private-data-from-millions-of-users/ AND https://thehackernews.com/2020/02/chrome-extension-malware.html
• Google removes alleged spying app ToTok from the Play Store for a second time https://www.theverge.com/2020/2/14/21138522/google-removes-totok-play-store-spying-app-uae
• I know where you rode last summer: Uncovering the security issues of shared scooter services https://www.imperva.com/blog/i-know-where-you-rode-last-summer-uncovering-the-security-issues-of-shared-scooter-services/
• Companies that Scrape Your Email https://www.schneier.com/blog/archives/2020/02/companiesthat.html
• Conservative News Sites Track You Lots More Than Left-Leaning Ones https://www.wired.com/story/right-left-news-site-ad-tracking/
• Edmonton police use data, artificial intelligence to combat crime https://globalnews.ca/news/6535688/edmonton-police-data-ai-community-solutions-accelerator/
• Toronto police admit using secretive facial recognition technology Clearview AI https://www.cbc.ca/news/canada/toronto/toronto-police-clearview-ai-1.5462785

Laws & Regulations / Standards

News about laws, regulations, and standards affecting security, privacy,  technology, and public interest.

• Don’t sell my data! We finally have a law for that https://www.washingtonpost.com/technology/2020/02/06/ccpa-faq/
• Sen. Gillibrand Introduces U.S. Data Protection Agency Bill https://epic.org/2020/02/breaking---sen-gillibrand-intr.html
• A US Data Protection Agency https://www.schneier.com/blog/archives/2020/02/ausdata_prote.html
• Britain to Create Regulator for Internet Content https://www.nytimes.com/2020/02/12/technology/britain-internet-regulator.html
• Reevaluating the DMCA 22 Years Later: Let’s Think of the Users https://www.eff.org/deeplinks/2020/02/reevaluating-dmca-22-years-later-lets-think-users
• Modifications to the CCPA regulations https://oag.ca.gov/sites/all/files/agweb/pdfs/privacy/ccpa-text-of-mod-redline-020720.pdf
• How PSD2 may ripple across the sea https://www.mobilepaymentstoday.com/blogs/how-psd2-may-ripple-across-the-sea/
• Blow To Bitcoin As ‘Significant’ U.S. Crypto Crackdown Suddenly Revealed https://www.forbes.com/sites/billybambrough/2020/02/16/blow-to-bitcoin-as-significant-us-crackdown-suddenly-revealed/
• AI Usage in Banking is Forcing the Conversation around the Ethical Use of Data https://insidebigdata.com/2020/02/12/ai-usage-in-banking-is-forcing-the-conversation-around-the-ethical-use-of-data/
• A new warrant reveals how Apple detects child pornography and works with law enforcement https://www.businessinsider.com/apple-child-abuse-hashing-warrant-2020-2
• California Auditor Releases Damning Report About Law Enforcement’s Use of Automated License Plate Readers https://www.eff.org/deeplinks/2020/02/california-auditor-releases-damning-report-about-law-enforcements-use-automated
• Copyright could be the next way for Congress to take on Big Tech https://www.theverge.com/2020/2/13/21133754/congress-dmca-copyright-reform-hearing-tillis-coons-big-tech
• Appeals Court Win for Open Source Advocate Speaking Out on Licensing Restrictions https://www.eff.org/press/releases/appeals-court-win-open-source-advocate-speaking-out-licensing-restrictions
• Oracle strikes back at Google in Supreme Court copyright case over Java https://www.theverge.com/2020/2/13/21136492/oracle-google-supreme-court-copyright-java-response-trial
• Draft NISTIR 8246, National Vulnerability Database (NVD) Metadata Submission Guidelines for Common Vulnerabilities and Exposures (CVE) Numbering Authorities (CNAs) and Authorized Data Publisher is open for comment until March 20 https://csrc.nist.gov/publications/detail/nistir/8246/draft

Defense / Techniques / Solutions

Covering developments and opportunities that may help improve security.

• Don’t sell my data! We finally have a law for that https://www.washingtonpost.com/technology/2020/02/06/ccpa-faq/
• Sen. Gillibrand Introduces U.S. Data Protection Agency Bill https://epic.org/2020/02/breaking---sen-gillibrand-intr.html
• A US Data Protection Agency https://www.schneier.com/blog/archives/2020/02/ausdata_prote.html
• Britain to Create Regulator for Internet Content https://www.nytimes.com/2020/02/12/technology/britain-internet-regulator.html
• Reevaluating the DMCA 22 Years Later: Let’s Think of the Users https://www.eff.org/deeplinks/2020/02/reevaluating-dmca-22-years-later-lets-think-users
• Modifications to the CCPA regulations https://oag.ca.gov/sites/all/files/agweb/pdfs/privacy/ccpa-text-of-mod-redline-020720.pdf
• How PSD2 may ripple across the sea https://www.mobilepaymentstoday.com/blogs/how-psd2-may-ripple-across-the-sea/
• Blow To Bitcoin As ‘Significant’ U.S. Crypto Crackdown Suddenly Revealed https://www.forbes.com/sites/billybambrough/2020/02/16/blow-to-bitcoin-as-significant-us-crackdown-suddenly-revealed/
• AI Usage in Banking is Forcing the Conversation around the Ethical Use of Data https://insidebigdata.com/2020/02/12/ai-usage-in-banking-is-forcing-the-conversation-around-the-ethical-use-of-data/
• A new warrant reveals how Apple detects child pornography and works with law enforcement https://www.businessinsider.com/apple-child-abuse-hashing-warrant-2020-2
• California Auditor Releases Damning Report About Law Enforcement’s Use of Automated License Plate Readers https://www.eff.org/deeplinks/2020/02/california-auditor-releases-damning-report-about-law-enforcements-use-automated
• Copyright could be the next way for Congress to take on Big Tech https://www.theverge.com/2020/2/13/21133754/congress-dmca-copyright-reform-hearing-tillis-coons-big-tech
• Appeals Court Win for Open Source Advocate Speaking Out on Licensing Restrictions https://www.eff.org/press/releases/appeals-court-win-open-source-advocate-speaking-out-licensing-restrictions
• Oracle strikes back at Google in Supreme Court copyright case over Java https://www.theverge.com/2020/2/13/21136492/oracle-google-supreme-court-copyright-java-response-trial
• Draft NISTIR 8246, National Vulnerability Database (NVD) Metadata Submission Guidelines for Common Vulnerabilities and Exposures (CVE) Numbering Authorities (CNAs) and Authorized Data Publisher is open for comment until March 20 https://csrc.nist.gov/publications/detail/nistir/8246/draft

Bugs / Design Flaws / Vulnerabilities / Research

Articles about newly discovered vulnerabilities and research.

• Common IoT firmware vulnerable to hidden Zero Day Backdoor - Port-knocking reveals four older vulnerabilities https://www.zdnet.com/article/researcher-backdoor-mechanism-still-active-in-many-iot-products/
• Intel warns of critical security flaw in CSME engine, issues discontinued product notices https://www.zdnet.com/article/intel-warns-of-critical-security-flaw-in-csme-engine/
• Shadow IT accounts with weak passwords endanger organizations https://www.helpnetsecurity.com/2020/02/10/shadow-it-passwords/

• Microsoft patch Tuesday security updates and problems:

  • Microsoft Patch Tuesday, February 2020 Edition https://krebsonsecurity.com/2020/02/microsoft-patch-tuesday-february-2020-edition/
  • Microsoft Issues Warning For Millions Of Windows 10 Users https://www.forbes.com/sites/gordonkelly/2020/02/15/microsoft-windows-10-upgrade-problem-update-windows-10-free/
  • Microsoft pulls security update after reports of issues affecting some PCs https://www.zdnet.com/article/microsoft-pulls-security-update-after-reports-of-issues-affecting-some-pcs/
• Update Microsoft Windows Systems to Patch 99 New Security Flaws https://thehackernews.com/2020/02/microsoft-windows-updates.html
• Critical Bug in GDPR Cookie Consent WordPress Plugin Afflicts 700K Sites https://threatpost.com/critical-wordpress-plugin-bug-afflicts-700k-sites/152871/
• A day^W^W Several months in the life of Project Zero - The Chrome bug of suffering and exploithttps://googleprojectzero.blogspot.com/2020/02/several-months-in-life-of-part1.html, https://googleprojectzero.blogspot.com/2020/02/several-months-in-life-of-part2.html
• What Exposed Docker Registries Tell Us About Cloud Deployments https://sector.ca/what-exposed-docker-registries-tell-us-about-cloud-deployments/
• Google to Samsung: Stop messing with Linux kernel code. It's hurting Android security https://www.zdnet.com/article/google-to-samsung-stop-messing-with-linux-kernel-code-its-hurting-android-security/
• USCYBERCOM Shares More North Korean Malware Samples https://www.securityweek.com/uscybercom-shares-more-north-korean-malware-samples
• Escaping the Chrome Sandbox with RIDL https://googleprojectzero.blogspot.com/2020/02/escaping-chrome-sandbox-with-ridl.html
• Abusing BitBucket to deliver malware https://www.cybereason.com/blog/the-hole-in-the-bucket-attackers-abuse-bitbucket-to-deliver-an-arsenal-of-malware
• Can All Of Bitcoin Be Hacked? (The potential impact of Quantum Computing) https://www.forbes.com/sites/baldwin/2020/02/16/can-all-of-bitcoin-be-hacked/
• Financial Cryptography 2020 conference - summary of “Fraudsters Taught Us that Identity is Broken” https://www.lightbluetouchpaper.org/2020/02/10/fc-2020/

Hacking / Malware / Cybercrime / Exploitation

News covering active trends and events.

• B-but it doesn't get viruses! Not so, Apple fanbois: Mac malware is growing faster than nasties going for Windows https://www.theregister.co.uk/2020/02/11/macmalwaregrowing_malwarebytes/
• China's Hacking Spree Will Have a Decades-Long Fallout https://www.wired.com/story/china-equifax-anthem-marriott-opm-hacks-data/
• (Finally!) Ontario husband and wife arrested in connection with CRA telephone tax scheme https://www.ctvnews.ca/canada/ontario-husband-and-wife-arrested-in-connection-with-cra-telephone-tax-scheme-1.4812598
• FBI warns about ongoing attacks against software supply chain companies https://www.databreaches.net/fbi-warns-about-ongoing-attacks-against-software-supply-chain-companies/
• The FBI Issues A Powerful $3.5 Billion Cybercrime Warning https://www.forbes.com/sites/daveywinder/2020/02/13/the-fbi-issues-a-powerful-35-billion-cybercrime-warning/
• FBI: 50 Pct Of Cybercrime Targets B2B Payments https://www.pymnts.com/news/b2b-payments/2020/fbi-50-pct-of-cybercrime-targets-b2b-payments/
• Active PayPal Phishing Scam Targets SSNs, Passport Photos https://threatpost.com/active-paypal-phishing-scam-targets-ssns-passport-photos/152755/
• SMS Phishing Campaign Targets Mobile Bank App Users in Canada and the US https://threatpost.com/sms-phishing-bank-app-north-america/152896/
• Austrian foreign ministry: 'State actor' hack on government IT systems is over https://www.theregister.co.uk/2020/02/14/austriaforeignministryhackturlagroupallegs/
• Powerful Cyber Attack Takes Down 25% Of Iranian Internet https://www.forbes.com/sites/daveywinder/2020/02/09/powerful-iran-cyber-attack-takes-down-25-of-national-internet/
• DDoS Attacks Nearly Double Between Q4 2018 and Q4 2019 https://www.darkreading.com/threat-intelligence/ddos-attacks-nearly-double-between-q4-2018-and-q4-2019/d/d-id/1337052
• 3 Employees Suspended in $4M Puerto Rico Online Scam https://www.securityweek.com/3-employees-suspended-4m-puerto-rico-online-scam
• KBOT Malware Shows Viruses Are Not Extinct https://www.securityweek.com/kbot-malware-shows-viruses-are-not-extinct
• A Light at the End of Liberty Reserve’s Demise? https://krebsonsecurity.com/2020/02/a-light-at-the-end-of-liberty-reserves-demise/

Other Security / Risk

Articles covering other types of risks.

• Journalism is an ‘attack surface’ for those who spread misinformation https://scienmag.com/journalism-is-an-attack-surface-for-those-who-spread-misinformation/
• Schneier Security in 2020: Revisited https://www.schneier.com/blog/archives/2020/02/securityin202_1.html
• The Antarctica Factor: model uncertainties reveal upcoming sea level risk https://scienmag.com/the-antarctica-factor-model-uncertainties-reveal-upcoming-sea-level-risk/
• Microsoft Confirms Massive Windows 10 Upgrade Changes https://www.forbes.com/sites/gordonkelly/2020/02/13/microsoft-windows-10-windows-10x-upgrade-changes-update-windows/
• Why is the healthcare industry still so bad at cybersecurity? https://arstechnica.com/information-technology/2020/02/why-is-the-healthcare-industry-still-so-bad-at-cybersecurity/
• Dating app users could find themselves matching with mental health problems, Sask. researcher says https://globalnews.ca/news/6533493/dating-app-mental-health-problems-university-of-saskatchewan-research/
• NASA has ‘no concerns’ that ‘planet-killer’ asteroid will hit Earth (Dozens of asteroids zip by the earth all the time - lots of online articles claim make alarming claims of near misses - if it gives the distance in 'AU' it's pure FUD) https://globalnews.ca/news/6546453/planet-killer-asteroid-passing-earth/
• TTC fare evasion now costing city $70M annually https://torontosun.com/news/local-news/ttc-fare-evasion-now-costing-city-70m-annually
• Blinded' Experiment Types Can Be Deeply Problematic. https://www.sciencealert.com/these-researchers-claim-blinding-in-experiments-isn-t-always-the-golden-choice
• NASA Will Only Tolerate So Much Danger https://www.theatlantic.com/science/archive/2020/02/boeing-nasa-starliner-software-problems/606361/
• Two Russian spacecraft are trailing a US spy satellite https://www.sciencealert.com/russian-spacecraft-are-trailing-a-us-spy-satellite-here-s-why-that-s-not-good
• Digital obscelesence follow-up, Tesla owner says remotely disabled Autopilot features have been restored https://www.theverge.com/2020/2/13/21136699/tesla-autopilot-used-model-s-owner-restored-assistance-features

Off-Topic / Science & Tech / Lighter Side

A variety of scientific, technical, historical, and more light-hearted news.

• ‘Reverse fuel cell’ converts waste carbon to valuable products at record rates https://scienmag.com/reverse-fuel-cell-converts-waste-carbon-to-valuable-products-at-record-rates/
• New Way to Generate Electricity From Rain Can Power 100 LED Bulbs Per Drop https://www.sciencealert.com/we-re-getting-closer-to-generating-electricity-from-raindrops
• A Small Change in Airplane Altitude Could Reduce Climate Impact of Contrails by 59% https://www.sciencealert.com/small-changes-in-aeroplane-altitude-could-have-a-big-impact-on-our-climate
• It's Time To Talk Hydrogen https://www.forbes.com/sites/patsapinsley/2020/02/11/its-time-to-talk-hydrogen/
• The latest USB-C chargers are apparently more powerful than Apollo 11’s computer https://www.theverge.com/tldr/2020/2/11/21133119/usb-c-anker-charger-apollo-11-moon-landing-guidance-computer-more-powerful
• 80 TB Hard Disk Drives https://www.forbes.com/sites/tomcoughlin/2020/02/12/80-tb-hard-disk-drives/
• Fungi found in Chernobyl feeds on radiation, could protect astronauts https://www.cnet.com/news/fungi-found-in-chernobyl-feeds-on-radiation-report-says/
• Yes, That Pink Manta Picture Is Real https://www.forbes.com/sites/melissacristinamarquez/2020/02/11/yes-that-pink-manta-picture-is-real/
• Airplane 2.0? Airbus unveils ‘MAVERIC’ plane design after secret tests https://globalnews.ca/news/6542159/airbus-maveric-blended-wing-plane/
• Electric solid propellant — can it take the heat? https://scienmag.com/electric-solid-propellant-can-it-take-the-heat/
• Physicists Have Finally Figured Out The Secret of How Soap Bubbles Get So Gigantic https://www.sciencealert.com/physicists-have-worked-out-exactly-why-soap-bubbles-can-reach-such-gigantic-sizes
• AI + Vintage American cooking: a combination that cannot be unseen https://aiweirdness.com/post/190721709472/ai-vintage-american-cooking-a-combination-that
• Betelgeuse's shenanigans just got weirder: Only part of it is dimming https://www.syfy.com/syfywire/betelgeuses-shenanigans-just-got-weirder-only-part-of-it-is-dimming