The Journal’s story shows that cargo hijacking fraud remains a serious problem — one that will cost $500 million by 2023, up fourfold the year before. Victims say load board operators need to do more to verify users’ identities, and law enforcement and regulators also need to do more to crack down on the thefts.
Multifactor authentication (MFA) has served as a crucial defense against hackers for years. In Apple’s case, a user may need to tap or click “allow” on an iPhone or Apple Watch before their password can be changed, an important safeguard against fraudulent password resets. But KrebsOnSecurity reports this week that some hackers are using these MFA push notifications as a weapon, bombarding users with hundreds of requests to force them to allow a password reset, or at least fix a very nasty disruption to their device. Even when a user dismisses all these password reset warnings, in some cases the hackers have called the user and pretended to be a support person (using identifying information from online databases to spoof their legitimacy) to socialize them to reset their password. password. The solution to the problem appears to be rate-limiting, a standard security feature that limits the number of times someone can try a password or change sensitive settings within a certain period of time. The hackers may be exploiting a bug in Apple’s speed limiting to enable their rapid attempts, although the company did not respond to Krebs’ request for comment.
Israel has long been accused of using Palestinians as… subjects of experimental surveillance and security technologies which it then exports to the world. In the case of the country’s months-long response to the October 7 Hamas massacre — a response that killed 31,000 Palestinian civilians and displaced millions more from their homes — that surveillance now includes the use of controversial and demonstrably unreliable facial recognition tools among the Palestinian population. The New York Times reports that Israeli military intelligence has adopted a facial recognition tool built by a private technology company called Corsight and used it in its efforts to identify members of Hamas – especially those involved in the October 7 attack – despite concerns that the technology was sometimes defective and produced false positives. In one case, for example, Palestinian poet Mosab Abu Toha was pulled from the crowd by soldiers who had somehow identified him by name, before he was beaten, accused of being a member of Hamas, and interrogated, before the soldiers then told him that. the interrogation had been a ‘mistake’.
In other dystopian AI news: The guard this week, it was reported on a government project in San Jose, California, that used AI-enabled computer vision technology to identify encampments and vehicles where unhoused people lived. The project will see video recorded from a car around the city given to participating companies, including Ash Sensors, Sensen.AI, can recognize. vehicles in which people could live. Although the project has been described as a way to identify and help people in need, housing advocates in San Jose say they worry the data will likely be given to police, thus serving as just another form of supervision aimed at the city’s most vulnerable residents.
Radical libertarian Ammon Bundy, a well-known figure on the far right, has been on the run since last year, charged with contempt of court after being ordered to pay $50 million to an Idaho hospital he accused of child trafficking and leading a campaign of intimidation against his staff. Last month, he posted a provocative video on YouTube with the caption, “Want to know where Ammon Bundy is?” Bellingcat’s open source detectives apparently did just that: They found enough evidence in Bundy’s videos to convincingly reveal his location. Bellingcat was able to use material such as a school calendar in the background of one shot, a mountain range in another and a highway sign in a third to place Bundy in a particular southern Utah county. When contacted by Bellingcat, Bundy denied that he was hiding and wrote, somewhat confusingly, that “peace officers could find me at any time if they wanted.”