Why breaking WhatsApp security is such a bad idea – Mashable


htxt.africa
Why breaking WhatsApp security is such a bad idea
Mashable
However, in this video British YouTuber Tom Scott passionately explains why forcing services like WhatsApp to break their end-to-end encryption is actually a very dangerous idea. "The devil is in the detail," Scott says. "If we could replicate the way ...
How WhatsApp encryption works and why we need ithtxt.africa

all 3 news articles »

More here:
Why breaking WhatsApp security is such a bad idea - Mashable

GitHub’s Advice to ‘Ask What You Can Do for Open Source’ – Windows IT Pro

On Saturday, the folks in Canada celebrated Canada Day, while today we here in the States are celebrating our Independence Day. Both countries celebrate with parades, fireworks and by eating too many hot dogs, and oddly enough, in the U.S. we include outdoor performances of the 1812 Overture -- which celebrates the defeat of a Western nation by Russia. Go figure.

Both holidays offer an opportunity to overindulge in national pride and to reflect on what it means to be a good citizen, which always evokes some variation on JFK's advice to "ask what you can do for your country." Of course, in this global world you might reword that to "ask what you can do for humankind." The choice is yours.

If you're a developer -- especially if you or your organization uses open source software -- GitHub has a potential answer to the question JFK would have you ask. You can pledge time to contribute to open source projects. It won't cost you anything but time, and you'll get to use your skills for the greater good.

GitHub is all about open source. While the development platform and code repository does host a number of proprietary projects, it's mostly a home for open source projects. And practically everyone uses it for at least a portion of their developmental needs -- even Microsoft which recently moved nearly all of it's open source projects to the platform.

And since we're on the subject of the Fourth of July, GitHub has also been a good open source citizen.

Already this year it has documented best practices with Open Source Guides that cover everything from how to make code contributions or start open source projects to finding users and building communities. It's released a balanced employee IP agreement, which any company or organization that requires employee IP agreements might find useful. In addition, it conducted an extensive Open Source Survey to provide insight into the state of open source.

It's latest project, Open Source Friday, was announced last week and it fits today's stateside celebrations -- or what those celebrations are meant to inspire.

"Open Source Friday is a structured program for contributing to open source," Mike McQuaid, a senior engineer at GitHub wrote in a blog announcing the project. "Contribution to open source is part of our DNA with GitHub employees maintaining projects like gh-ost, Rails, Atom, Homebrew, HospitalRun and Exercism. Over the last three years, we've encouraged GitHub employees to take time at least every fourth Friday to work on open source and share what we're working on with each other. Open Source Friday has grown from this into a program anyone can take part in."

It's doubtful that McQuaid, who hails from Scotland where they probably have a different take on our Independence Day than we, or GitHub made the connection with today's U.S. holiday -- you can blame me for that. But whether you agree there's a connection or not, Open Source Friday is still a good idea.

"Open Source Friday isn't limited to individuals," he added. "Your team, department, or company can take part, too. Contributing to the software you already use isn't altruisticit's an investment in the tools your company relies on. And you can always start small: spend two hours every Friday working on an open source project relevant to your business."

Heck, if you play your cards right, you might even get the bosses to let you contribute on company time. And businesses that frequently use open source software might want to offer all employees the opportunity to contribute a couple of hours a week on the company's dime. This could include even those who aren't coders:

"A common misconception about contributing to open source is that you need to contribute code," GitHub points out in its guide on contributing to open source. "In fact, its often the other parts of a project that are most neglected or overlooked. Youll do the project a huge favor by offering to pitch in with these types of contributions!"

Getting started is easy. Just go to the Open Source Friday webpage and click the "sign up" button. If you don't have at least a free GitHub account, you'll be prompted to open one. Once signed up, you'll find resources, including help finding open source projects that could use your help if you need it.

Now, go and enjoy your Fourth.

The rest is here:
GitHub's Advice to 'Ask What You Can Do for Open Source' - Windows IT Pro

Global Quantum Cryptography Market – Analysis, Technologies & Forecasts to 2021 – Aided by Adoption of Crypto … – Business Wire (press release)

DUBLIN--(BUSINESS WIRE)--Research and Markets has announced the addition of the "Global Quantum Cryptography Market 2017-2021" report to their offering.

The global quantum cryptography market to grow at a CAGR of 33.22% during the period 2017-2021.

The report, Global Quantum Cryptography Market 2017-2021, has been prepared based on an in-depth market analysis with inputs from industry experts. The report covers the market landscape and its growth prospects over the coming years. The report also includes a discussion of the key vendors operating in this market.

According to the report, one driver in market is adoption of the crypto cloud computing system. Crypto cloud computing is built on the quantum direct key system. Each entity encrypts data using their individual private key while using crypto cloud computing systems. These crypto cloud computing systems are being rapidly adopted for authentication processes, video management systems, and for storing information gathered from biometrics. Many enterprises including banks and healthcare organizations are storing their confidential data on the cloud, which makes it important to secure the cloud from unauthorized access. The adoption of crypto cloud computing systems is escalating faster in small and medium sized business (SMBs) when compared to large enterprises as cloud-based services work on a pay-per-use model. These systems also offer flexibility and scalability to accommodate the varying needs of the enterprises.

Key vendors

Other prominent vendors

Key Topics Covered:

PART 01: Executive summary

PART 02: Scope of the report

PART 03: Research Methodology

PART 04: Introduction

PART 05: Market landscape

PART 06: Five forces analysis

PART 07: Market segmentation by end-user

PART 08: Geographical segmentation

PART 09: Decision framework

PART 10: Drivers and challenges

PART 11: Market trends

PART 12: Vendor landscape

PART 13: Key vendor analysis

PART 14: Appendix

For more information about this report visit https://www.researchandmarkets.com/research/sx97c4/global_quantum

Continue reading here:
Global Quantum Cryptography Market - Analysis, Technologies & Forecasts to 2021 - Aided by Adoption of Crypto ... - Business Wire (press release)

Assange hits back at threats from ‘tolerant liberals’ and brands Hillary Clinton a JOKE – Express.co.uk

GETTYTWITTER

Using the hashtag #tolerantliberal, Mr Assange has spent a considerable amount of time retweeting articles and posts from senior journalists at organisations who appear to have called for an extrajudicial killing.

In his flurry of tweets, Mr Assange included compilation videos showing both Democrats and Republican politicians in the US, calling for him to be hanged or droned.

A number of videos even show TV pundits calling for the Wikileaks founder to be executed, with the Palmer Report going as far as to compare him to terrorist Osama Bin Laden.

TWITTER

In response, he launched a scathing attack at the mainstream media for their lack of standards.

Mr Assange wrote: These journalists love nothing more than to threaten to help assassinate me and my staff and my sources for telling the truth.

They couldn't dream of our accuracy or independence. I have abiding contempt for their lack of standards and craven characters.

Mr Assange was once the focus of intense hate from the conservative media following the release of classified security information on his website.

The tables appear to have turned however, with the hate now coming from their liberal counterparts following the publishing of leaked emails from the Democratic National Committee during last years US presidential election.

In his retaliation, Mr Assange hit out at Hillary Clintons comments against him, going as far as to label her failed Presidential campaign a joke.

Getty Images

1 of 10

It is believed that Julian Assange chooses to live in Sweden because the country's media laws are among the world's most protective for journalists

He wrote: She said it was a joke--a bit like her election campaign? It's certainly not good to threaten our staff or torture our alleged sources.

After retweeting a series of posts from Twitter users calling for him to be tortured and put to death, Mr Assange concluded that liberals aint liberal.

He wrote: Theyve fallen into bed with the worst elements of state hard power & love censorship and death.

Go here to see the original:
Assange hits back at threats from 'tolerant liberals' and brands Hillary Clinton a JOKE - Express.co.uk

Cryptocurrency Hash Rental Service Review Nicehash – The Merkle

Summary

Nicehash is an excellent platform for people looking for multipool mining or a way to buy and sell hashpower. The platform is very transparent about its business and has built up a solid reputation over the past three years.

It is not all that easy to find a legitimate cryptocurrency cloud mining service. Nicehash is one of the few companies people can trust these days. The platform specializes in cloud mining, hash rental services, and multipool mining. It is refreshing to see legitimate companies pop up now and the in the landscape filled with Ponzi Schemes. Now is a good time to look at what Nicehash offers to its customers and why they are so successful.

Most cryptocurrency cloud mining scams ask users to make a Bitcoin investment, so they can earn a passive income. Unfortunately, a lot of those are Ponzi schemes. However, Nicehash is doing things in a professional manner and without putting users at risk of losing any funds. In fact, they are one of a handful of legitimate companies in the world of cryptocurrency cloud mining.

Nicehash first came to the market in April of 2014 and has quickly grown to be one of the most reliable online mining hashrate marketplaces in the world. The company specializes in added-value services for miners, traders, and investors alike. Providing customer support services helped Nicehash achieve success. So far, the team is doing an outstanding job in this regard, as they have no negative reviews.

What makes NiceHash so unique is how they let users buy and sell hashing power on demand. Contracts can run for as little as one hour, and the maximum duration can be agreed upon by the buyer and seller. The platforms marketplace is filled with available orders, which can be filtered based on mining algorithm, and geographical locations. Reducing latency between the miner and the mining pool is of the utmost importance to maximize potential earnings.

It is worth mentioning Nicehash is not the only company providing a cryptocurrency mining hashrate marketplace. Mining Rig Rentals is one of their main competitors in this space, as they provide a powerful service as well. It is good to see competing peer-to-peer mining hashpower rental marketplaces. Competitionallows for far more flexibility than one would get through traditional cloud mining.

Nicehash also provides users with their own mining software clients, which is a nice addition. Plus, their own multipool servers allow miners to point their eligible hardware to the pool and earn mining revenue in the process. Nicehash supports a few dozen mining algorithms, including X11, Scrypt, Keccak, Decred, Cryptonight, and Pascal. Pointing aminer at this pool allows users to earn revenue without having to worry about anything, as earnings are calculated and paid out automatically.

The main question is whether or not miners should sell their hashpower or point it to the multipool. It heavily depends on how much risk one is willing to take. Using the multipool means investing in the mined coins, which can be a financial risk.One could always rent out the hashpower and keep mining the multipool as long as the contract is not picked up by a buyer. That way, users can get the best of both worlds.

If you liked this article, follow us on Twitter @themerklenews and make sure to subscribe to our newsletter to receive the latest bitcoin, cryptocurrency, and technology news.

Read the rest here:
Cryptocurrency Hash Rental Service Review Nicehash - The Merkle

ElliottWaveTrader launching cryptocurrency service – CryptoNinjas – CryptoNinjas

It was announced recently from ElliottWaveTrader.net (EWT), a live Trading Room of market analysis, based on Elliott Wave principle, that due to high demand and many requests, they will start a cryptocurrency service based onElliott Wave analysis. To lead this new service, the firm has brought on Ryan Wilday.

Ryan has over 17 years experience trading equities, futures, and options. He was introduced to cryptocurrency in 2013 by a programmer friend and began mining and trading shortly thereafter.

The EWT team stated:

Though he read Prechters Elliott Wave Principle in the early 2000s, he didnt make practical use of the theory until joining EWT in 2015. Today he melds his deep knowledge of the cryptocurrency market with Elliott Wave theory and Fibonacci Pinball.

Ryans service will be opening in August of 2017, more information will be forthcoming on the launch.

ElliottWaveTrader benefits traders looking to anticipate the direction of U.S. & world equity indices, stocks, bonds, precious metals, energy & forex over a time horizon of several days to several months.

The site also features insights and interaction by its community of traders, many of them professionals, as members are encouraged to post questions and contribute their own analysis in the interactive room.

How the cryptocurrency market and certain assets within react to Elliot Wave analysis will be quite interesting to observe.

Read more here:
ElliottWaveTrader launching cryptocurrency service - CryptoNinjas - CryptoNinjas

South Korea Will Introduce Legislation To Legalize Cryptocurrencies – ETHNews

News world

The South Korean government is expected to consider legislation that is intended to increase consumer trust in cryptocurrencies.

South Korean lawmakers will be presenting several bills that will affect the legal status of cryptocurrencies. According to the Korea Herald, Rep. Park Yong-jin of the Democratic Party stated on July 3, 2017 that he will introduce three revisions in July that will build a set of regulatory frameworks for digital currencies. According to Park, the legislation is intended to fill the void of a state-led protection that guarantees digital currencys value, and eradicate the possibility of wreaking havoc on national economy from digital currency bubble burst.

One bill aims to revise the Electronic Financial Transactions Act. If approved, the bill will require traders, brokers, and other businesses involved in cryptocurrency transactions to get regulatory approval from the Financial Services Commission, maintain data processing facilities, and have at least 500 million won ($436,300) in capital.

Tax laws will also be revised to allow Korean financial authorities to pursue tax evaders who do not pay income or corporate tax from digital currency transactions. According to Park and the Financial Supervisory Service, although virtual currency exchanges hold a large amount of market power in the countrys cryptocurrency space, there is no legal ground for their business.

The move for more robust regulation comes after a mishap with South Korean exchange Yapizon, when it fell victim to a massive bitcoin heist in April. In the incident, a hacker swiped four hot wallets and made off with 3831 bitcoin, which at the time totaled to about $5 million. To resolve the problem, Yapizon implemented a clever accounting scheme in which it essentially provided users with IOUs. At the time of the occurrence, the South Korean government authorities lacked regulation to handle such calamities. Parks proposals lookto fill this void and increase trust in one of South Koreas emerging markets.

Cryptocurrency investments have also been on the rise in East Asian markets. To promote growth and innovation in FinTech companies operating in foreign exchange markets, the South Korean Ministry of Strategy and Finance in May decided to revamp capital requirements, which will go into effect July 18.

Dan is a US Army veteran and Los Angeles-based writer passionate about science and technology, current events, human rights, economic impacts, and strategic calculus. Dan is a full time staff writer for ETHNews and holds value in Ether.

Original post:
South Korea Will Introduce Legislation To Legalize Cryptocurrencies - ETHNews

The Rise of Decentralized P2P Crypto-Currency Lending – NEWSBTC – newsBTC

Cryptocurrency lending is about to boom. Today, crypto-currency lending is a field that does not have a plausible service provider due to the pseudo-anonymous nature of crypto-currency. The underlying issue with crypto-lending is the repayments of loans. How do people that do not know each other trust each other?

Trustless lending. ETHLend is a decentralized crypto-currency lending application that runs on Ethereum network, which is accessible through MetaMask, an Ethereum network browser. ETHLend solves the issue of trust by allowing the borrower to secure a crypto-loan with ERC-20 compatible Ethereum-based tokens. ERC-20 tokens can represent any value (such as shares or commodities). If the borrower does not repay the loan, the pledged tokens are transferred to the lender, who can sell the tokens on exchange to regain any losses.

Today, tokens are used mainly for fundraising. However, there are tokens that represent value from the real world, such as the DigixDAO token. Each DigixDAO token represents 1 gram of gold by tokenization. Even if tokens are associated with volatility, factually tokens are sufficient for securing a loan. First, the market price of tokens are usually available at different exchanges. Secondly, the volatility can be assessed and taken into account.

Alternatively, ETHLend provides another option, where the borrower can use Ethereum Name Service domain (ENS domain) as a collateral for the loan. ENS domains by design locks Ether (ETH) when the domain name is auctioned. Since ENS domains are transferrable, they can be easily used as a collateral against Ether loans. For example, borrower has ENS domain that has locked 10 ETH. The borrower cannot use this locked Ether. However, the borrower can pledge this domain for a loan to receive 10 ETH. If the borrower does not repay the loan back, the ENS domain is transferred to the lender (who can auction it to regain any losses).

Decentralized lending removes barriers and lowers costs on interest. ETHLend aims to provide a global liquidity pool between peers. The decentralized model and the use of crypto-currency is the proper solution to achieve ETHLends goal. Global liquidity pool means that a borrower in the US would not be limited solely to local lenders and US banks. Instead, the borrower can access funding from all parts of the world, such as Asia and Europe. Moreover, ETHLend wants to remind that there is 2 billion people without the access to any banking system. Lending crypto-currency would mean additionally access to finance for the unbanked.

Big plans for ETHLend. According to the white paper, there are lot of technical upgrades coming up for ETHLend, such as unsecured lending where borrower does not need a collateral to get a loan. Moreover, lending reputation system is about to be launched, where the borrower is rewarded with ETHLends native Credit Token (CRE), which can be used as a collateral by sparing other ERC-20 tokens.

We interviewed the Founder of ETHLend, a law student from Finland and a blockchain developer, to get more insights over the project.

Who are the people behind ETHLend?

We are a dedicated team of 14 people. We are working hard to provide blockchain technology for the mainstream. We want to democratize lending. This means that we want to remove interest rate differences between different countries and provide liquidity to lower interest rates in general. This would mean that borrowers would pay less in interest costs when there is more competition in a global scale. Moreover, we want to serve people that the banks are not serving due to the lack of banking infrastructure.

Is lending secure on ETHLend?

ETHLend is a decentralized application that runs on Ethereum blockchain network. We use Smart Contracts for the loan transactions. This means that each loan that is deployed on Ethereum blockchain cannot be changed, stopped or compromised by a third party (not even ETHLend).

Moreover, since all transactions are decentralized, we do not hold any assets or data. All assets such as ETH, ERC-20 tokens or ENS domains are held by the Smart Contracts. Any lender or borrower can explore loans on blockexplorer, therefore we are transparent by design.

What crypto-currencies can I borrow and lend?

Now, Ether (ETH) lending is available. We chose to use ETH since that is the native token of the Ethereum network that we have built our application on. We are planning to add other cryptocurrencies such as Bitcoin, Litecoin and other altcoins. To get ETHLend to the mainstream, we think that Bitcoin is essential.

Why did you build on top of Ethereum network?

We decided to use Ethereum for three reasons. First, Ethereum has well established Smart Contracts, which allows to perform complex transactions such as lending and handling the collateral. Secondly, by using ETH, we do not have to communicate with two blockchains, which would not be ideal way to start a simple DAPP development. Lastly, even though ETH has a different purpose than Bitcoin, ETH is widely used as cryptocurrency.

How ETHLend differs from other blockchain projects?

We started by developing the application. We first created the decentralized application, instead of writing a white paper and opening a flashy website. I personally wanted to understand how decentralized lending would work in practice. As coming from a legal background and not from technical, I wanted to try it first and then write an analysis on my practical findings, the white paper.

Moreover, we have an amazing team working on ETHLend. I have never seen such extensive collaboration that we have at ETHLend. Practically we are all living in different parts of the world, but initially we have the same goal: to provide fair lending for all by using blockchain technology. We are also happy to have more people involved through our Slack.

What is your focus on the development?

Since we have an Ethereum-based application that runs stable, we are now focusing on adding more functionalities and user experience. Our goal here is to make decentralized lending as easy and accessible as possible. We want to keep the learning curve as low as possible. As a part of the user experience, we are adding more languages and ways to easily calculate the value of the collateral to avoid unnecessary loan requests.

Is there going to be an ICO?

We are going to have a token sale on early September. Our aim is to fund the further development of ETHLend and provide the largest lending market that works on a global scale. We want our future token holders to be part of it.

How the tokens are distributed?

We are distributing 1 billion Credit Tokens (CRE) for sale. There will be no follow up sales and all unsold CRE is burned. Additionally, 300 million CRE is allocated to the development fund as an incentive for our founders and developers to remain with the project. The development fund tokens will have a 24-month vesting model, which means that during this period, tokens are gradually released from lockup on each 6-months-period.

Getting ready for token sale. According to Stani, the ETHLend team is preparing for the upcoming token sale. The aim is to provide decentralized, secure, fair and democratic token sale. ETHLend is currently developing the Smart Contract for the token sale. However, the precise date of the token sale is not disclosed. ETHLend will inform the date of the token sale within couple of weeks.

Read more from the original source:
The Rise of Decentralized P2P Crypto-Currency Lending - NEWSBTC - newsBTC

FBI Says Hackers Managed to Extort $28 Million in Cryptocurrencies – The Merkle

On June 22, the FBI presented their annualInternet Crime Report, this one for 2016. By using the reports from the Internet Crime Complaint Center, they are able topublish the yearly document outlining trends and instances of Internet crimes. Still, these reports maynot be enough if they want to view the wholesituation since it is suspected that only 15% of victims actually report their situation.

Multiple hot topics fromthe last year were highlighted, including the massive BEC loss. BEC (Business Email Compromise) was an incident that ended with the loss of over $360 million. Currently, this is the largest known attackfrom last yearwith countlessvictims. BEC turned out to be a very sophisticated scam, and it only targeted foreign and international companies.

Another major point in the report is ransomware, which is growing more and more popular as an attack form. Ransomware works by locking the infected devices and holding documents for ransom. The criminals are able to use it to send messages to their victims, and those mostly include a ransom demand. More often than not, they would put a bitcoin price and a link to the bitcoin wallet. Over $2.4 million was lost to ransomware last year, and 2,673 reports were identified.

Othermajor attacksoutlined in the reportare tech support frauds. Tech fraudscammers managed to steal $7.8 million. The scam pretty much follows the same process every time. The scammer gets on the phone with their victims by various means. They then try to convince the victim that something is wrong with their device. The criminalstry to get control of the computer and then offer their services in dealing with the problem in return for money or gift cards.

Over 17,146 individual cases of extortion were recorded as well, and the total loss here is over $15 million, all of which happened online. FBIs report mostly points out physical threats that were made via the internet. Basically, criminals demand money or something valuable, or they will cause the victim physical injuries. There were also reports of threats like releasing sensitive data, and even sextortion.

Other forms of online crimes include DDoS attacks, schemes revolving around government impersonations, hitman schemes, as well as loan schemes, and even breaches of high-profile data. Criminals mostly demand payment in Bitcoin or some other cryptocurrency. It is easier to move around, and also has more security layers which make it harder to trace.

Reportedonline crimes rose 3.7% in 2016. Apart from the US, the most infected foreign countries are Canada, India, UK, Australia, and France. When it comes to the individual states within the US, California suffered the most. It is followed by Texas and Florida which both had over 21,000 reports.

Another part of the report also included the affected age groups. According to the FBI, those above 60 had suffered the most and lost over $339 million last year. Next are those between the ages of 30 and 39, who lost around $190 million. Lastly, the younger users, mostly those around and under 20 years of age were much fewer in number. They also suffered less damage, which was only estimated to be around $6.7 million.

If you liked this article, follow us on Twitter @themerklenews and make sure to subscribe to our newsletter to receive the latest bitcoin, cryptocurrency, and technology news.

Original post:
FBI Says Hackers Managed to Extort $28 Million in Cryptocurrencies - The Merkle

WikiLeaks reveals CIA targeting Linux users with OutlawCountry malware – Neowin

Wikileaks, the controversial online data leaker which is known for exposing corruption within governments and corporations, has released a massive data dump which included some interesting news about what the CIA has been up to recently. According to the leak, the CIA has targeted Linux users, with an exploit that re-routes network traffic towards them for analysis.

The exploit called 'OutlawCountry', which is detailed in the report, essentially loads itself onto a vulnerable system as a Linux kernel module (nf_table_6_64.ko) and then creates a new exemption in the IPtables firewall protocol. Once this is done, it deletes itself. When all is said and done, the attacker can exploit the system to re-route all traffic to designated CIA servers.

The proactive community over on Linux is most likely already hard at work fixing this exploit, but it is still alarming. The CIA has been exploiting Windows systems for quite some time and it seems they want to have a peek inside the systems of the extremely private Linux user as well.

One good thing, however, is that this malware attack requires physical access to the system so that it can get elevated privileges, so if you're running the system and it's connected to the internet, you should be safe since it cannot run via an email attachment or like a lot of malware, download itself onto your system through ads in your browser.

Source: HotHardware | Image via HotHardware

More:
WikiLeaks reveals CIA targeting Linux users with OutlawCountry malware - Neowin