Year: 2018

Microsoft announces Adaptive Controller for Xbox

[Microsoft.com]: Over at Xbox Wire, Phil Spencer – Head of Xbox – is talking about our newest gaming controller designed to enable and empower even more Xbox One and Windows 10 gamers across the globe: The Xbox Adaptive Controller.

Here are some of the highlights from Phil’s post:

“We have been on a journey of inclusive design, which celebrates and draws inspiration from people who are often overlooked in the typical design process.

For gamers with limited mobility, finding controller solutions to fit their individual needs has been challenging. The solutions that exist today are often expensive, hard to find, or require significant technical skill to create. A number of individuals and organizations are creating custom solutions, but it has been often difficult for them to scale when most rigs need to be so personalized.

Joining the Xbox family of controllers and devices, the Xbox Adaptive Controller was created to address these challenges and remove barriers to gaming by being adaptable to more gamers’ needs.  It was developed in partnership with organizations around the world, including The AbleGamers Foundation, The Cerebral Palsy Foundation, Craig Hospital, SpecialEffect, and Warfighter Engaged. We worked closely with them and directly with gamers who have limited mobility to assist in our development.

To read the full post from Phil Spencer, head over to Xbox Wire, and learn more about accessibility at Microsoft here.

Read more here.

Hurdles Remain After Senate Votes To Restore Net Neutrality

The U.S. Senate this week gave the nod to restoring net neutrality regulations that would prevent ISPs from controlling access to certain websites.

But roadblocks remain, even as the legislation is pushed on the fast track to a House vote: Bigwig ISPs, independent ISPs, small businesses, Democrats and Republicans are all continuing to butt heads over the controversial regulations.

“The main challenge is that the size of the House of Representatives means more people are needed to get the majority required to pass the bill,” Katharine Trendacosta, policy analyst for the Electronic Frontier Foundation, told Threatpost.

Net neutrality ensures that ISPs don’t discriminate against different types of internet content. Also known as the Open Internet Order, passed three years ago during the Obama-era, the rules prohibit ISPs from blocking, throttling or discriminating against any internet content, and from establishing a pay-to-play scheme that requires content providers to pay for the privilege of transmission.

The 52-47 Senate vote on Wednesday follows months of anticipation after the Trump administration in December signed an order repealing the Open Internet Order. The repeal is scheduled to take effect on June 11.

On the heels of the repeal, the Federal Communications Commission (FCC) submitted a replacement called the Restoring Internet Freedom Order, which returned the internet regulations “to the traditional light-touch framework that was in place until 2015,” according to the regulator.

Activists, technology groups and political players on both sides have clashed over the net neutrality laws. Up to 23 U.S. Attoneys General, as well as tech companies like Mozilla, Reddit and Etsy, have actively opposed the repeal of net neutrality. Their concern is that absent such regulation, ISPs could deny access to cloud-delivered services that compete with their own offerings. For instance, companies like Comcast or Verizon, which are large ISPs as well as pay-TV providers, could throttle services like Hulu or Netflix in order to give their own video services a better experience for consumers. Proponents also argue that paid prioritization (“fast lanes”) could also be used as a competitive tool to drive smaller and start-up over-the-top and cloud application providers out of business, who may not be able to pay for carriage.

“We will continue to fight for net neutrality in every way possible as we try to protect against erosion into a discriminatory internet, with ultimately a far worse experience for any users and businesses who don’t pay more for special treatment,” said Denelle Dixon, chief operating officer at Mozilla, in a statementafter the Senate vote.

On the other side of the coin, the 2015 net neutrality regulations have been opposed by large ISPs like Comcast, AT&T and Verizon. Opponents of net neutrality argue for a market-based approach and claim the regulation is overreach.

“This vote throws into reverse our shared goal of maintaining an open, thriving internet,” said Jonathan Spalter the president and CEO of USTelecom, an organization that represents telecommunications-related businesses like AT&T and Verizon. “Consumers want permanent, comprehensive online protections, not half measures or election year posturing from our representatives in Congress.  While we are disappointed by this vote, broadband providers remain committed to safeguarding the digital lives of consumers and advancing bipartisan legislation that codifies net neutrality principles across the online world.”

Ajit Pai, the Republican chairman of the FCC who penned the Restoring Internet Freedom Order released in January, also called the Senate vote “disappointing” and an impediment to a “free and open” internet.

“It’s disappointing that Senate Democrats forced this resolution through by a narrow margin.  But ultimately, I’m confident that their effort to reinstate heavy-handed government regulation of the internet will fail,” said Pai in a statement after the vote. “The internet was free and open before 2015, when the prior FCC buckled to political pressure from the White House and imposed utility-style regulation on the Internet.  And it will continue to be free and open once the Restoring Internet Freedom Order takes effect on June 11.”

Meanwhile, Senate Democrats like Sen. Ed Markey (D-MA) also took to Twitter to express support of the restoration of the Open Internet Order.

However, with the 2018 midterm elections looming in November, these efforts may be seen merely as a political method to rally both parties.

The measure needs to win a majority vote, or 218 votes, in a House where Republicans dominate; and to get a signature from President Donald Trump, who supports the FCC’s action.

For the meantime, Trendacosta argues that the vote at least sets the ground rules for future net neutrality legislation: “It helps establish a floor,” she told Threatpost. “The Senate voted to keep a rule that banned blocking, throttling and paid prioritization. That should send a message that any bill they consider in the future should at least keep those protections in place.”

Latin American ‘Biñeros’ Bond Over Fraudulent Purchase Scheme

A type of card-not-present fraud is spreading throughout the Latin American underground, uniting groups of malefactors in a communal effort to perpetrate it as widely and as often as possible.

Cybercriminals in the region are making use of problems in the validation process for bank identification numbers (BINs) to generate fake payment card numbers; they then use the fake cards for online transactions. The perpetrators are accordingly dubbed “biñeros” by researchers at Flashpoint, who analyzed the phenomenon.

BINs are four- to six-digit numbers that identify the issuing bank in a payment card purchase. The crooks are gathering on the Dark Web to discuss hunting for BINs that will work on online streaming and e-commerce sites that improperly authorize them during online checkout processes.

“BINs have a purpose in limiting fraud and speeding up payments by matching transactions to an issuing institution, which receives the authorization request related to a transaction,” Flashpoint researchers said, in an analysis. “The improper validation likely arises from the bank behind the BIN not supporting the type of card validation that the online retailers perform, thereby approving a card even if it is not valid.”

Armed with a BIN that can bypass the security of the checkout system, they simply create the other card details out of whole cloth, like CVV codes and expiration dates. “Most of the remaining card details can be generated with a specialized tool,” the researchers explained, adding that these handy generators are available in Spanish-, Portuguese- and English-language forums.

They added, “Most biñeros seem to prefer inventing a fraudulent card rather than stealing or buying existing card numbers; the vulnerabilities in the respective checkout systems can be exploited to trick the bank into processing a payment, even on a card that likely doesn’t exist.”

Thus, the fraudsters simply bank on the BIN (so to speak) on these sites to be approved without being tied to real card details, so they can buy or subscribe to music and video streaming content or carry out fraudulent purchases. Underground tutorials even offer advice on shipping the ill-gotten goods and the use of reshipping services to serve as a drop site.

An interesting aspect of the phenomenon is the communal spirit of the biñero ecosystem. Any number of Spanish- and Portuguese-language forums play host to groups of biñeros, who seem willing to share their tips and tactics wide and far. They also use social media and messaging platforms to share information publicly and collaborate to the “benefit” of all likeminded fraudsters.

The researchers speculated that this kumbaya effect could be because the players want to boost their credibility and reputation by publicizing their knowledge and latest shenanigans, or it could be that impacted entities are just so slow to respond – and vulnerable BINs so easy to find – that they’re not worried about oversaturation or burning their attack surface.

In any event, Flashpoint analysts said they have observed a rising number of discussions about this type of fraud in Spanish-language forums and on the encrypted messaging app Telegram.

“A worrisome aspect to this type of fraud is that it’s carried out with fabricated information, save for the BINs, meaning there’s no need to purchase or steal compromised payment card data anywhere else on the Deep & Dark Web (DDW),” Flashpoint analysts said. “The low levels of effort and technical sophistication needed to conduct biñero fraud may indicate that this method will continue to attract new fraudsters.”

Wait, what? Website flaw exposed most U.S. cellphones’ real-time locations

“A website flaw at a California company that gathers real-time data on cellular wireless devices could have allowed anyone to pinpoint the location of any AT&T, Verizon, Sprint or T-Mobile cellphone in the United States to within hundreds of yards, a security researcher said,” Frank Bajak reports for The Associated Press. “The company involved, LocationSmart of Carlsbad, operates in a little-known business sector that provides data to companies for such uses as tracking employees and texting e-coupons to customers near relevant stores.”

“Among the customers LocationSmart identifies on its website are the American Automobile Association, FedEx and the insurance carrier Allstate,” Bajak reports. “The LocationSmart flaw was first reported by independent journalist Brian Krebs. It’s the latest case to underscore how easily wireless carriers can share or sell consumers’ geolocation information without their consent.”

U.S. Senator Ron Wyden “said the LocationSmart and Securus cases underscore the ‘limitless dangers’ Americans face due to the absence of federal regulation on geolocation data. ‘A hacker could have used this site to know when you were in your house so they would know when to rob it. A predator could have tracked your child’s cellphone to know when they were alone,’ he said in a statement,” Bajak reports. “LocationSmart took the flawed webpage offline Thursday, a day after Carnegie Mellon University computer science student Robert Xiao discovered the software bug and notified the company, Xiao told The Associated Press. The doctoral researcher said the bug ‘allowed anyone, anywhere in the world, to look up the location of a U.S. cellphone,’ said Xiao. ‘I could punch in any 10-digit phone number,’ he added, ‘and I could get anyone’s location.'”

Read more in the full article here.

You may have Missed:

Verified by MonsterInsights