Sunday, May 24, 2020
SpaceX to Bring Astronauts to Short-Handed Space Station for Longer Stay
JioMart Online Grocery Service Now Available in 200 Towns Across India
A massive database of 8 billion Thai internet records leaks
Thailand’s largest cell network AIS has pulled a database offline that was spilling billions of real-time internet records on millions of Thai internet users.
Security researcher Justin Paine said in a blog post that he found the database, containing DNS queries and Netflow data, on the internet without a password. With access to this database, Paine said that anyone could “quickly paint a picture” about what an internet user (or their household) does in real-time.
Paine alerted AIS to the open database on May 13. But after not hearing back for a week, Paine reported the apparent security lapse to Thailand’s national computer emergency response team, known as ThaiCERT, which contacted AIS about the open database.
The database was inaccessible a short time later.
It’s not known who owns the database. Paine told TechCrunch that the kind of records found in the database can only come from someone who’s able to monitor internet traffic as it flows across the network. But there is no easy way to differentiate between if the database belongs to the internet provider — or one of its subsidiaries — or a large enterprise customer on AIS’ network. AIS spokespeople did not respond to our emails requesting comment.
DNS queries are a normal side-effect of using the internet. Every time you visit a website, the browser converts a web address into an IP address, which tells the browser where the web page lives on the internet. Although DNS queries don’t carry private messages, emails, or sensitive data like passwords, they can identify which websites you access and which apps you use.
But that could be a major problem for high-risk individuals, like journalists and activists, whose internet records could be used to identify their sources.
Thailand’s internet surveillance laws grant authorities sweeping access to internet user data. Thailand also has some of the strictest censorship laws in Asia, forbidding any kind of criticism against the Thai royal family, national security, and certain political issues. In 2017, the Thai military junta, which took power in a 2015 coup, narrowly backed down from banning Facebook across the country after the social network giant refused to censor certain users’ posts.
DNS query data can also be used to gain insights into a person’s internet activity.
Using the data, Paine showed how anyone with access to the database could learn a number of things from a single internet-connected house, such as the kind of devices they owned, which antivirus they ran, and which browsers they used, and which social media apps and websites they frequented. In households or offices, many people share one internet connection, making it far more difficult to trace internet activity back to a particular person.
Advertisers also find DNS data valuable for serving targeted ads.
Since a 2017 law allowed U.S. internet providers to sell internet records — like DNS queries and browsing histories — of their users, browser makers have pushed back by rolling out privacy-enhancing technologies that make it harder for internet and network providers to snoop.
One such technology, DNS over HTTPS — or DoH — encrypts DNS requests, making it far more difficult for internet or network providers to know which websites a customer is visiting or which apps they use.
Germany-based Arculus raises €16M Series A to help manufacturers, from Audi to Siemens, upgrade assembly lines with its "modular production platform" (Steve O'Hear/TechCrunch)
Germany-based Arculus raises €16M Series A to help manufacturers, from Audi to Siemens, upgrade assembly lines with its “modular production platform” — Arculus, the Ingolstadt, Germany-based startup that has developed a “modular production platform” to bring assembly lines …
Amazon India to push private brands in hygiene, safety products
Bihar parties go big on digital outreach
The UK's National Cyber Security Centre is conducting a new review into the impact of allowing Huawei telecom equipment to be used in British 5G networks (Mary-Ann Russon/BBC)
The UK's National Cyber Security Centre is conducting a new review into the impact of allowing Huawei telecom equipment to be used in British 5G networks — The UK government is conducting a new review into the impact of allowing Huawei telecoms equipment to be used in British 5G networks.
Handset retailers' earnings hit as brands erase sales incentive
View: The need to look at India's technology agenda in a holistic way
Instagram eyes TikTok for fresh user acquisition, advertises on rival platform
Realme TV, Realme Watch, Realme Buds Air Neo Launching in India Today
Sensor Tower: first-time downloads of the top 20 mental wellness apps in the US hit 4M in April, up 29% from Jan.; experts say therapy apps need more oversight (Kira Herzog/CNBC)
Sensor Tower: first-time downloads of the top 20 mental wellness apps in the US hit 4M in April, up 29% from Jan.; experts say therapy apps need more oversight — - First-time downloads of the top 20 mental wellness apps in the U.S. hit 4 million in April. That's up 29 percent from 3.1 million in January.
Ecomm cart in fast lane, but may lose steam
Interview with CTO of Pentagon's Joint AI Center Nand Mulchandani about the center's work and its new Silicon Valley-like organizational structure and workflows (Khari Johnson/VentureBeat)
Interview with CTO of Pentagon's Joint AI Center Nand Mulchandani about the center's work and its new Silicon Valley-like organizational structure and workflows — It was a busy week for defense-focused AI: DarwinAI signed a partnership with Lockheed Martin, the world's largest defense contractor …
When COVID-19 is a joke: Stand-up comedy versus livestreaming’s limits
Enlarge (credit: Aurich Lawson / Getty)
“Was that a stinky DD coming from a big giraffe? It’s definitely not coming from our 14 different pooper dooper locations!”
Moments after stand-up comedian Meg Stalter drops this punchline, as part of a routine mocking the Disney Work Orientation process, her crowd of 11,400 viewers is silent. But she’s not bombing. Stalter is streaming her comedy set via Instagram Live, and as soon as the joke drops, her audience members begin furiously tapping their phone screens, thus sending a wave of pink, yellow, and blue diaphanous hearts up from the right-hand side of her own livestreaming interface.
“I’m about to puke this is so funny,” one fan types. It’s not the immediate feedback of a laughing crowd, but for Stalter, she’ll take it.
Read 19 remaining paragraphs | Comments
A look at what's next for Netflix and Comcast's Peacock after the WBD-Paramount deal; Nielsen says Netflix had six of the top 10 original streaming shows in Q1 (Lucas Shaw/Bloomberg)
Lucas Shaw / Bloomberg : A look at what's next for Netflix and Comcast's Peacock after the WBD-Paramount deal; Nielsen says Netfl...
-
Sohee Kim / Bloomberg : South Korean authorities are investigating a data leak at e-commerce giant Coupang that exposed ~33.7M accounts; ...
-
The first project we remember working on together was drawing scenes from the picture books that our mom brought with her when she immigrate...
