HCA Healthcare disclosed a data breach that exposed the personal information of roughly 11 million patients.

HCA Healthcare this week announced that the personal information of roughly 11 million patients was compromised in a data breach.

The organization discovered the security breach on July 5 when a threat actor claimed the hack on an underground forum.

As proof of the hack, the threat actors posted stolen info for some of the patients, including:

• Patient name, city, state, and zip code;
• Patient email, telephone number, date of birth, gender; and
• Patient service date, location and next appointment date.

The info was exfiltrated from an external storage location that was exclusively used to automate the formatting of email messages.

The incident did not expose

• Clinical information, such as treatment, diagnosis, or condition;
• Payment information, such as credit card or account numbers;
• Sensitive information, such as passwords, drivers license or social security number.

HCA Healthcare launched an investigation into the security breach with the help of third-party forensic and threat intelligence advisors. The company also notified law enforcement and the investigation is still ongoing. At the time of this publishing, the company has yet to identify evidence of malicious activity on its networks or systems related to this incident.

We do NOT believe that clinical information (such as treatment, diagnosis, or condition), payment information (such as credit card or account numbers), or other sensitive information (such as passwords, drivers license or social security number) is involved. states the company. The investigation is ongoing and we cannot confirm the number of individuals whose information was impacted. HCA Healthcare believes that the list contains approximately 27 million rows of data that may include information for approximately 11 million HCA Healthcare patients.

In response to the incident, HCA Healthcare disabled user access to the storage location.

There has been no disruption to the care and services HCA Healthcare provides to patients and communities. This incident has not caused any disruption to the day-to-day operations of HCA Healthcare. Based on the information known at this time, the company does not believe the incident will materially impact its business, operations or financial results. concludes the company.

Follow me on Twitter: @se...

The Filesystem in Userspace (FUSE) framework can be used to create a "stacked" filesystem, where the FUSE piece adds specialized functionality (e.g. reporting different file metadata) atop an underlying kernel filesystem. The performance of such filesystems leaves a lot to be desired, however, so the FUSE BPF filesystem has been proposed to try to improve the performance to be close to that of the underlying native filesystem. It came up in the context of a session on FUSE passthrough earlier in the 2023 Linux Storage, Filesystem, Memory-Management and BPF Summit, but the details of FUSE BPF were more fully described by Daniel Rosenberg in a combined filesystem and BPF session on the final day of the summit.

Digilock launched Pivot, hardwired built-in locks for new stationary furniture installations. Digilock brings its keyless lock experience to facilities requiring a hardwired power and data source for its permanent fixtures. Pivot Smart Locks are networked locks that operate with proprietary DigiLink software to provide anytime, anywhere management from the Cloud. The new hardwired solution allows customers to manage Pivot from the same platform as their wire-free Digilock Smart Locks. Users will be able to choose More

The post Digilock introduces hardwired keyless lock solution appeared first on Help Net Security.

Over the years, weve seen a good number of interfaces used for computer monitors, TVs, LCD panels and other all-things-display purposes. Weve lived through VGA and the large variety of analog interfaces that preceded it, then DVI, HDMI, and at some point, weve started getting devices with DisplayPort support. So you might think its more of the same. However, Id like to tell you that you probably should pay more attention to DisplayPort its an interface powerful in a way that we havent seen before.

...

Drata announced the appointment of Sydney Sloan as the companys first ever Chief Marketing Officer (CMO). Sloan will oversee global marketing at Drata to help market and brand leadership, fuel customer engagement, and accelerate the companys commitment to delivering value to its over 3,000 customers. Sloan is an expert in spearheading and executing successful global marketing strategies while building world class teams for high growth SaaS companies. She most recently served as CMO of Salesloft More

The post Drata appoints Sydney Sloan as CMO appeared first on Help Net Security.

upstart writes:

Plastic production is skyrocketing, pushing microplastic pollution to dangerous new levels:

Not even the Arctic Ocean is immune to the incessant growth of microplastic pollution. In a new study that analyzed sediment core samples, researchers quantified how many of the particles have been deposited since the early 1930s. As scientists have shown elsewhere, the team found that microplastic contamination in the Arctic has been growing exponentially and in lockstep with the growth of plastic productionwhich is now up to a trillion pounds a year, with the global amount of plastic waste projected to triple by 2060.

These researchers analyzed the seawater and sediment in the western part of the Arctic Ocean, which makes up 13 percent of its total area. But in just that region, they calculated that 210,000 metric tons of microplastic, or 463 million pounds, have accumulated in the water, sea ice, and sediment layers that have built up since the 1930s. In their study, published last week in the journal Science Advances, they cataloged 19 synthetic polymer types in three forms: fragments, fibers, and sheets. That reflects a dizzying array of microplastic sources, including fragments from broken bottles and bags and microfibers from synthetic clothing.

Overall, the team found that microplastic levels have been doubling in Arctic Ocean sediments every 23 years. That mirrors a previous study of ocean sediments off the coast of Southern California, which found concentrations to be doubling every 15 years. Other researchers have found an exponential rise in contamination in urban lake sediments.

[...] The atmosphere, too, is increasingly infested with microplastics. By one calculation, the equivalent of hundreds of millions of disintegrated plastic bottles could be falling on the United States alone. A study of a peatland area in the Pyrenees found that in the 1960s, less than five atmospheric microplastics were being deposited per square meter of land each day. It's now more like 180.

...

• GNU/Linux

  • Kernel Space

    • DebugPoint ...

• Gemini* and Gopher

  • Personal/Opinions

    • SpellBinding: CDESLPK Wordo: JOCKS

  • Technology and Free Software

    • BESM Multiverse and Uresia: Grave of Heavan arrived!

      My physical copies of the BESM Multiverse Maps, BESM Multiverse, BESM Uresia: Grave of Heavan, and Ikarion Gate, the BESM Multiverse LitRPG novel arrived today. I really like having physical books for things that are information dense: settings or rules; I find it helps my comprehension when learning the material. (Im this way about technical material as well: I try to get computer books in print as well.)

    • Having fun with NixOS

      I decided to run NixOS on my personal laptop, replacing an Arch Linux installation that Ive had for years. The idea of a declarative OS has a strong appeal to me, since Im a big fan of declarative languages SQL probably being the main one.

      [...]

      On the other hand, I realized I dont have to install pyenv in order to create isolated Python environments for development. I can just use a Nix shell to spawn a new Python

    • Software and services I use

    • Day 1

      First day of the Old Computer Challenge. Ive spent most of the day at work so Ive been using new computers for that. For travel, Im trying to reduce the amount I use my phone as its more powerful than the limit. Ive now booted up the old computer and the WiFi is failing to connect. Not sure why. I may have to reboot.

    • Getting into Flash

      So Im slightly younger and I got into flash in two ways. Firstly, I obtained a copy of Macromedia Flash 5 on CD. But more impo...

SETIs task challenges the imagination in every conceivable way, as Don Wilkins points out in the essay below. A retired aerospace engineer with thirty-five years experience in designing, developing, testing, manufacturing and deploying avionics, Don is based in St. Louis, where he is an adjunct instructor of electronics at Washington University. He holds twelve patents and is involved with the universitys efforts at increasing participation in science, technology, engineering, and math. The SETI methodology he explores today offers one way to narrow the observational arena to targets more likely to produce a result. Can spectacular astronomical phenomena serve as a potential marker that could lead us to a technosignature?

by Don Wilkins

Finite SETI search facilities searching a vast search volume must set priorities for exploration. Dr. Jill Tarter, Chair Emeritus for SETI Research, describes the search space as a nine-dimensional haystack composed of three spatial, one temporal (when the signal is active), two polarization, central frequency, sensitivity, and modulation dimensions. Methods to reduce the search space and prioritize targets are urgently needed.

One method for limiting the search volume is the SETI Ellipsoid, Figure 1, which is reproduced from a recent paper in The Astronomical Journal by lead author James R. A. Davenport (University of Washington: Seattle) and colleagues. [1]

Image: This is Figure 1 from the paper. Caption: Schematic diagram of the SETI Ellipsoid framework. A civilization (black dot) could synchronize a technosignature beacon with a noteworthy source event (green dot). The arrival time of these coordinated signals is defined by the time-evolving ellipsoid, whose foci are Earth and the source event. Stars outside the Ellipsoid (blue dot) may have transmitted signals in coordination with their observation of the source event, but those signals have not reached Earth yet. For stars far inside the Ellipsoid (pink dot), we have missed the opportunity to receive such coordinated signals. Credit: Davenport et al.

In this approach, an advanced civilization (black dot) synchronizes a technosignature beacon with a significant astronomical event (gree...

Perimeter 81 announced the hiring of Gadi BenMark as Chief Marketing Officer. With more than 20 years experience in marketing strategy and business development across a variety of industries, BenMark brings extensive working knowledge to Perimeter 81. He reports to CEO Amit Bareket. BenMark has worked at larger enterprises for decades, and brings valuable experience to Perimeter 81 as the company continues to evolve and grow. He will lead Perimeter 81s marketing organization, including market More

The post Perimeter 81 hires Gadi BenMark as CMO appeared first on Help Net Security.

The 6.4.3 stable kernel has been released; it contains a handful of fixes, mostly for problems associated with the per-VMA locking code. Anybody running 6.4 probably wants this update.

Note that there is a much larger 6.3.13 update going through a longer-than-usual review process that should show up soon.

Google engineers have published early code around "Device Memory TCP" (a.k.a. Devmem TCP) as a proposal for transferring data to/from device memory efficiently by avoiding the need to copy the data to a host memory buffer...

Vercara has released a new integration of its enterprise-grade, cloud-based authoritative DNS service, UltraDNS, with HashiCorps Consul-Terraform-Sync (CTS), a multi-platform tool designed to automate tasks across network devices that are traditionally handled manually by networking operators. The integration, UltraDNS-CTS, follows a successful initial effort with the UltraDNS Terraform Provider in 2022 and makes Vercara an official HashiCorp technology partner. UltraDNS-CTS enables mutual customers to transition DNS management to a cloud operating model, improving productivity for More

The post Vercara partners with HashiCorp to support DevOps teams throughout the development lifecycle appeared first on Help Net Security.

SUSE has announced that it is getting into the business of creating RHEL clones and investing $10 million in the project.

SUSE remains fully committed to investing in its highly regarded Linux solutions such as SLE and openSUSE that countless satisfied enterprise customers and the community rely on. At the same time, it acknowledges that enterprises and the open source community deserve choice and freedom from vendor lock-in. SUSE has a long history in empowering and supporting users with mixed Linux environments.

SUSE is committed to working with the open source community to develop a long-term, enduring compatible alternative for RHEL and CentOS users. SUSE plans to contribute this project to an open source foundation, which will provide ongoing free access to alternative source code.

Security updates have been issued by Debian (mediawiki and node-tough-cookie), Red Hat (bind, kernel, kpatch-patch, and python38:3.8, python38-devel:3.8), SUSE (kernel, nextcloud-desktop, and python-tornado), and Ubuntu (dwarves-dfsg and thunderbird).

Apple released Rapid Security Response updates for iOS, iPadOS, macOS, and Safari web browser to address an actively exploited zero-day.

Apple has released Rapid Security Response updates for iOS, iPadOS, macOS, and Safari web browser to address a zero-day flaw, tracked as CVE-2023-37450, that has been actively exploited in the wild.

Tricking the victim into processing specially crafted web content may lead to arbitrary code execution.

The flaw resides in the WebKit and Apple addressed it by improving checks.

Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited. reads the advisory published by Apple.

The vulnerability CVE-2023-37450 was reported to the company by an anonymous researcher.

The IT giant did not reveal details about the attacks in the wild exploiting this issue or the nature of the threat actors.

Apple initially addressed the issue with the release of iOS 16.5.1 (a), iPadOS 16.5.1 (a), macOS Ventura 13.4.1 (a), and Safari 16.5.2. However the company pulled iOS 16.5.1 and macOS 13.4.1 Rapid Security Response Updates due to safari bug.

Apple earlier today released new Rapid Security Response updates for iOS 16.5.1, iPadOS 16.5.1, and macOS Ventura 13.4.1 users, but Apple has pulled the software, likely due to an issue that caused certain websites not to work after the RSRs were installed. states the website MacRumors.

According to reports on the MacRumors forums, Facebook, Instagram, WhatsApp, Zoom, and other websites started giving a warning about not being supported on the Safari browser following the Rapid Security Response updates.

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

...

GRUB 2.12 had been talked about for a mid-2022 release while one year later we are finally greeted by the first release candidate for this next major open-source bootloader release...

Netskope announced a new partnership with Wipro to deliver cloud-native Managed Secure Access Service Edge (SASE) and Managed Zero Trust Network Access (ZTNA) services to Wipros extensive global enterprise client portfolio. As the global work environment transforms, our Security Cloud platform continues to serve as a critical component for remote workforces, and we are well-positioned to continue to support enterprises as their security needs evolve, said Dave Rogers, SVP of Global Alliances and Channel Sales, More

The post Netskope collaborates with Wipro to help users protect sensitive data appeared first on Help Net Security.

This new report can doom not just YouTubes latest plans but YouTube as a whole (it can go offline or remove a lot of material/access in order to lower cost of operations)

Summary: YouTube may have much bigger problems than the Linux Foundation and Spamnil (whose views are about 95% fake/bots/spam; that stopped only temporarily, then resumed); on a much broader scale it seems like people and companies have been fed false numbers, causing them to spend money on something worthless

By Waqas

The software vulnerability, identified as CVE-2023-37450, has raised concerns due to its potential for arbitrary code execution.

This is a post from HackRead.com Read the original post: Apple Issues Device Updates to Patch Critical Vulnerability

Matthieu Herrb (matthieu@) has written some notes on his work at the (recently-concluded) g2k23 hackathon in Tallinn, Estonia. His article, Wayland on OpenBSD, starts:

These are my notes from experimenting with building Wayland bits on OpenBSD during g2k23 in Tallinn Thanks to the OpenBSD foundation for organizing this event.

This is still far from a complete running system as there are many issues on the road, but its a good start and it shows that its definatly not impossible to get Wayland running on OpenBSD.

Read the rest of Wayland on OpenBSD by following the link.

Summary: Deep-sleep brain waves could be a significant factor in regulating blood sugar. The research shows that a combination of sleep spindles and slow waves can predict an increase in insulin sensitivity, subsequently lowering glucose levels.

This discovery highlights sleep as a potential lifestyle adjustment to improve blood sugar control and manage diabetes. Furthermore, these deep-sleep brain waves could also be used to predict an individuals next-day glucose levels, proving more accurate than traditional sleep metrics.

Discover all the ways MITRE ATT&CK can help you defend your organization. Build your security strategy and policies by making the most of this important framework. What is the MITRE ATT&CK Framework? MITRE ATT&CK (Adversarial Tactics, Techniques, and Common Knowledge) is a widely adopted framework and knowledge base that outlines and categorizes the tactics, techniques, and procedures (TTPs)

Break out your tuxedo or your evening gown, were going to take in some highbrow culture. A night at the opera perhaps, some Tchaikovsky from the symphony orchestra, or maybe a bit of Shakespeare? No, were going to a demo party, because the demoscene is the latest art form to be accepted as officially a part of the national cultural heritage of the Netherlands.This builds on successes adding the scene to the cultural heritage registers of Finland, Germany, and Poland, and should provide a boost to other bids in countries such as Switzerland and eventual UNESCO world acceptance.

Its all very cool that one of our wider communitys art forms is at last being taken seriously rather than being dismissed by the establishment, because along with greater recognition comes other benefits. Sadly we dont expect any cities to shell out for a demo auditorium next to the shiny new opera house any time soon, but we can see that it could be used to the benefit of for example a hackerspace chasing grants. meanwhile, feast your eyes on a bit of cultural heritage courtesy of the Dutch Centre For Intangible Cultural Heritage (Dutch language,...

Alteryx announced decision intelligence and intelligent automation capabilities on AWS designed to empower chief financial officers (CFOs) and finance leaders to embrace cloud and data analytics as strategic tools for their modernization goals. Analytic insights help us tailor digital transformation solutions based on our clients needs to achieve the greatest impact for their business, said Ana Margarita Albir, president at ADL Labs. Leveraging Alteryx and AWS, we are able to integrate capabilities across any data More

The post Alteryx Analytics Automation powered by AWS allows CFOs to modernize financial processes appeared first on Help Net Security.

Yesterday Oracle published an interesting announcement and doubled down on their intentions of keeping Oracle Linux compatible with Red Hat Enterprise Linux following Red Hat's controversial announcement last month. Today is another very interesting response to Red Hat's recent shift, this time from the SUSE Linux folks...

Cloud environments continue to be at the receiving end of an ongoing advanced attack campaign dubbed SCARLETEEL, with the threat actors now setting their sights on Amazon Web Services (AWS) Fargate. "Cloud environments are still their primary target, but the tools and techniques used have adapted to bypass new security measures, along with a more resilient and stealthy command and control

Richard Hughes of Red Hat and the lead developer behind the Linux Vendor Firmware Service (LVFS) has released Fwupd 1.9.3 as the newest feature update to this open-source solution for carrying out system and peripheral firmware updates on Linux...

Apple has patched an actively exploited zero-day vulnerability (CVE-2023-37450) by releasing Rapid Security Response updates for iPhones, iPads and Macs running the latest versions of its operating systems. The vulnerability has also been fixed with a regular security update in Safari (16.5.2), so users running macOS Big Sur and macOS Monterey can also implement the fix. About CVE-2023-37450 As per usual, Apple doesnt say much about the fixed vulnerability. All we know is that CVE-2023-37450: More

The post Apple pushes out emergency fix for actively exploited zero-day (CVE-2023-37450) appeared first on Help Net Security.

Objective: This study describes the expression profiles and roles of cardiac pigment epithelium-derived factor (PEDF) during cardiac development.

Methods: Gene datasets from the Gene Expression Omnibus (GEO) database were used to analyze the correlation between cardiac PEDF expression and heart disease. Western blotting.

Immunohistochemistry, histological staining and echocardiography were used to assess the expression patterns and functions of PEDF during cardiac development.

Have you ever wondered about the future of aging? What if I told you that were on the brink of a revolution that could redefine what it means to grow old with gene therapy.

Today, I want to introduce you to a woman who is not just imagining this future, but actively creating it.

Meet Liz Parrish, the trailblazing CEO of BioViva, a biotech company thats pushing the boundaries of whats possible with gene therapies.

oumuamua writes:

[This is mix of an advertisement and a blog post, rather than an actual story, but it piqued my interest by including 3 different text-to-image generators in one package. Some of us are already learning the limits of, and skills required for, image generation, and I suspect that it will not be too long before collaborative mixes of AI language generation will be appearing, at least in the areas of research. Anyway, lets see what you make of it... JR]

Genolve.com is integrates three major players in AI art:

Genolve, a platform for creating professional designs, has just text-to-image generators: DALL-E 2, Stability.ai and Midjourney! Just type in a description of the desired image and generate it in seconds for pennies per image. Still, it can be tricky to get exactly what you need and in this blog post you'll learn the tricks and techniques to coax the AI to generate mind-blowing results through prompt engineering. You'll also learn step-by-step how to AI edit your own photos to remove unwanted items or add something extra using a technique called inpainting.

---

Original Submission

Read more of this story at SoylentNews.

If we didnt know better, we might conclude that Cuevana is Spanish for mole.

The popular streaming piracy brand first appeared on the radar in 2009 and anti-piracy forces have been trying to whack it ever since.

The original Cuevana site was founded by Tomas Escobar, at the time an engineering student in Cordoba, Argentina. By offering a Netflix-type streaming experience, with a bigger catalog and without any subscription fees, the pirate service quickly took off.

Taking Down Cuevana

It didnt take long before rightsholders started to take notice of the millions of users flocking to the site. That marked the start of a series of enforcement campaigns that continues to this day.

Rightsholders and their anti-piracy representatives are no longer battling Escobar. The original founder moved on many years ago, and with an unrelated innovator accolade from MIT Technology Review, he now builds a career as an entrepreneur.

Escobars change of plans opened the doors for aspiring pirate tycoons, of which there were many. Over the past decade, many dozens of new Cuevana variants have launched, using creative domain name variations such as Cuevanahd, Cuevana2, and Cuevana3.

It is not always clear if and how these new variations are linked, but Cuevana remained a thorn in the site of Hollywood and was repeatedly featured on the U.S. Trade Representatives list of notorious pirate sites.

Cuevana is the most popular piracy site in the Spanish-speaking part of Latin America, offering more than 7,000 unlicensed television and movie titles, the USTR wrote in its most recent overview.

ACEs 2021 Breakthrough

Two years ago, the Alliance of Creativity and Entertainment (ACE) appeared to have made a breakthrough. The coalition announced that it had sent a cease and desist letter to the streaming portals Chilean operators, who decided to throw the towel.

This shutdown was legitimate and notable as it affected millions of users, but it didnt shut down the Cuevana brand. In fact, Cuevana3.io, the leading domain at the time, remained online.

Today, the European Commission adopted its adequacy decision for the EU-U.S. Data Privacy Framework. The decision concludes that the United States ensures an adequate level of protection comparable to that of the European Union for personal data transferred from the EU to US companies under the new framework. On the basis of the new adequacy decision, personal data can flow safely from the EU to US companies participating in the Framework, without having More

The post European Commission adopts adequacy decision for safe EU-U.S. data flows appeared first on Help Net Security.

• GNU/Linux

  • Desktop/Laptop

    • ZDNet If youre looking to up your desktop computer security, Linux might be your best bet

      Ive been espousing this hot take on Linux for a very long time. It seems, however, that the phrase theres no time like the present is more apropos today than it has ever been.

      Threats to security and privacy seem to never abate. They are constant and they grow more widespread and effective with every passing attack. Bad actors are savvy and know the best ways to hit you. One of the reasons for this threat is because, most likely, you use Windows as your primary desktop and laptop operating system.

  • Audiocasts/Shows

    • Jupiter Broadcasting Race To Immutability | LINUX Unplugged 518

      ...

A developing piece of ransomware called Big Head is being distributed as part of a malvertising campaign that takes the form of bogus Microsoft Windows updates and Word installers. Big Head was first documented by Fortinet FortiGuard Labs last month, when it discovered multiple variants of the ransomware that are designed to encrypt files on victims' machines in exchange for a cryptocurrency

VMware warns customers of the public availability of an exploit code for the RCE vulnerability CVE-2023-20864 affecting vRealize.

VMware warned customers of the availability of an exploit code for the critical RCE vulnerability CVE-2023-20864 in the VMware Aria Operations for Logs analysis tool  (formerly vRealize Log Insight).

VMware Aria Operations for Networks (formerly vRealize Network Insight) is a network monitoring tool that helps organizations build an optimized, highly available, and secure network infrastructure.

In April, the virtualization giant released security updates to address two critical vulnerabilities, tracked as CVE-2023-20864 and CVE-2023-20865, impacting the Aria Operations for Logs product (formerly vRealize Log Insight).

The vulnerability CVE-2023-20864 (CVSSv3 base score of 9.8) is a deserialization issue that can be exploited by an unauthenticated attacker with network access to Aria Operations for Logs to execute arbitrary code as root

Now the company has updated the initial security advisory to confirm the availability of the exploit code for the above issue. The company is urging customers to patch the flaw immediately.

VMware has confirmed that exploit code for CVE-2023-20864 has been published reads the security advisory.

In June, the company warned customers that another critical remote code execution vulnerability in Aria Operations for Networks, tracked as CVE-2023-20887, is being actively exploited in the wild.

VMware has confirmed that exploitation of CVE-2023-20887 has occurred in the wild, reads the advisory

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

...

In August 2014, the Roblox hacking forum Vermillion suffered a data breach that exposed over 8k subscriber records. The breach of the MyBB forum exposed email and IP addresses, usernames, dates of birth and salted password hashes.

22bet Registration

Every different platform seems like a midget in comparison with the fantastic 22Bet. I can not get sufficient of the on line casino slots in their nice numbers. Our soccer suggestions are made by professionals, but this doesnt guarantee a revenue for you. We ask you to bet responsibly and only on what youll be able to afford. Please familiarise yourself with the foundations for higher information. The Welcome Bonus should be wagered inside 7 days of receiving it.

• Since broadcasting rights are concerned, stay streaming is only available for a few matches in any given sport.
• You should completely go through each the documents before you full your registration.
• This sportsbook provides plenty of betting choices for punters and prospects who prefer on line casino games to wager on sports.
• Are you a passionate sports activities fanatic in Zambia looking for an exhilarating online betting experience?
• Thus, the system will confirm the bonus code and confirm its validity.
• Secondly, this operator includes a devoted casino part with a extensive array of slot games.

Are you ready to add an extra increase to your weekend betting activities? Look no further than the Saturday Reload Bonus from 22Bet. However, it is very essential that you contemplate all the chances for looking out and activating bonuses. This will allow you to avoid errors and give you the alternative to higher perceive the terms and situations of the bookmakers promotions.

Moreover, you might have 60 seconds to type the verification code within the designated field. However, if, for any purpose, you fail to do that in one minute, you can resend the request. Lastly, you must tick the field at the underside of the web page to confirm you wish to obtain promotional offers. Moreover, its advised that you need to create a strong password.

This bonus package has a weight-bearing 50x wagering requirement to be fulfilled within seven days. Moreover, the utmost stake while fulfilling this requirement could be the direct equal of 5 Euros/Dollars. Step 4.Use the free guess at your personal discretion when inserting bets on varied sports. The Saturday Reload Bonus from 22Bet is the proper way to make your weekends much more rewarding. With its easy-to-follow terms of receipt and enticing bonus situations, youve the opportunity to enjoy a free wager that matches your deposit.

What Are The 22bet Registration Requirements?

Other events may need fewer betting options, but they are nonetheless well-represented. A good range of eSports betting choices is also there and contains Mortal Combat, Dota 2, League of Legends, and World of Tanks. 22Bet is a global sportsbook and on line casino platform owned by Marikit Holdings Ltd Casinos. The owner of the sports betting section is TechSolutions Group N.V. However, Arcadia Hospitality Limited manages...

22bet App Obtain Zambia

You can use your ID, Passport or Smart Card because the identity document. These documents are only requested when the players make such a request for deposit or withdrawal that fraudulent activities are suspected. Click on the Registration button and youll have access to your model new account. Simply present the sportsbook with copies of your ID card, a utility bill, and a duplicate of your financial institution assertion. Afterwards, you can withdraw your funds per the sportsbooks phrases and situations.

On Saturday, make a deposit of a minimal of 10 EUR to unlock the bonus and elevate your betting potential. The acquired Free Bet can be used as a single or multi guess on any sportsbook occasion of your selection. Should your wager using the Free Bet end in a win, your winnings shall be credited to your major balance as withdrawable funds. However, please note that the Free Bet stake itself will not be returned with any winnings. Are you someone who loves to check their sports prediction abilities? After getting into the promo code, click on on the Validate button.

22Bet has an impressive welcome bonus construction in distinction for these two sections, amongst other promotional provides. The massive number of sporting occasions and on line casino games is undoubtedly one of many platforms most important treasures. The 22Bet review of the cellular sports activities betting and on line casino platform is robust enough. Since no app is available for obtain, everyone can place bets on sports and on line casino video games on a cellphone browser, no matter the display screen measurement. The out there betting markets on the web betting platform are massively various.

Since the structure is carried over from the principle web site, it facilitates straightforward navigation. Besides, the bet slip is easily viewable always on the mobile site. Thus, we are in a click Download the iOS app. Your cell phone will set up the app, and youll be able to sign up or sign up. You should create an account, choose your deposit technique, enter the amount, and finalize the transaction. Note that you should be no much less than 18 years old to wager on the web site.

While football still has the very best variety of betting markets to put bets on, different games still have a justifiable share. Whether youre a basketball fan, desk tennis enthusiast, or volleyball fan, theres something for all Zambians. Like different high online sportsbooks in Zambia, 22Bet has a formidable assortment of digital gaming for its customers. Players can simply choose from numerous digital sports activities occasions to play on. Overall, the bonuses 22Bet Zambia provides include honest wagering necessities.

Here, you need to select several bets and mix them in a single wager. For instance, you can try to guess the outcomes of six wagers and combi...

Oxeye has uncovered two critical security vulnerabilities and recommends immediate action to mitigate risk. The vulnerabilities were discovered in Owncast (CVE-2023-3188) and EaseProbe (CVE-2023-33967), two open-source platforms written in Go. Owncast vulnerability (CVE-2023-3188) The first vulnerability was discovered in Owncast, an open-source, self-hosted, decentralized, single-user live video streaming and chat server written in Go. CVE-2023-3188, labeled as an Unauthenticated Blind Server-Side Request Forgery (SSRF), could potentially allow unauthenticated attackers to exploit the Owncast server by More

The post Owncast, EaseProbe security vulnerabilities revealed appeared first on Help Net Security.

Many early home video game consoles were developed by American and Japanese companies: think Nintendo, Commodore, and Atari. But on the other side of the Iron Curtain, which was still very much in place in the 1980s, an entirely separate industry was built on names like Tesla and Elektronika. As a resident of the republic of Georgia, [Thomas] over at Workshop Nation has built up a sizeable collection of such Soviet-era hardware. A while back, he stumbled upon an Elektronika Video Sport 3, a 1990-vintage Pong-like video game console made in the USSR, and made a delightful video that shows him bringing it back to life.

...

The phrase "Root of Trust" turns up at various points in discussions about verified boot and measured boot, and to a first approximation nobody is able to give you a coherent explanation of what it means[1]. The Trusted Computing Group has a fairly wordy definition, but (a) it's a lot of words and (b) I don't like it, so instead I'm going to start by defining a root of trust as "A thing that has to be trustworthy for anything else on your computer to be trustworthy".

(An aside: when I say "trustworthy", it is very easy to interpret this in a cynical manner and assume that "trust" means "trusted by someone I do not necessarily trust to act in my best interest". I want to be absolutely clear that when I say "trustworthy" I mean "trusted by the owner of the computer", and that as far as I'm concerned selling devices that do not allow the owner to define what's trusted is an extremely bad thing in the general case)

Let's take an example. In verified boot, a cryptographic signature of a component is verified before it's allowed to boot. A straightforward implementation of a verified boot implementation has the firmware verify the signature on the bootloader or kernel before executing it. In this scenario, the firmware is the root of trust - it's the first thing that makes a determination about whether something should be allowed to run or not[2]. As long as the firmware behaves correctly, and as long as there aren't any vulnerabilities in our boot chain, we know that we booted an OS that was signed with a key we trust.

But what guarantees that the firmware behaves correctly? What if someone replaces our firmware with firmware that trusts different keys, or hot-patches the OS as it's booting it? We can't just ask the firmware whether it's trustworthy - trustworthy firmware will say yes, but the thing about malicious firmware is that it can just lie to us (either directly, or by modifying the OS components it boots to lie instead). This is probably not sufficiently trustworthy!

Ok, so let's have the firmware be verified before it's executed. On Intel this is "Boot Guard", on AMD this is "Platform Secure Boot", everywhere else it's just "Secure Boot". Code on the CPU (either in ROM or signed with a key controlled by the CPU vendor) verifies the firmware[3] before executing it. Now the CPU itself is the root of trust, and, well, that seems reasonable - we have to place trust in the CPU, otherwise we can't actually do computing. We can now say with a reasonable degree of confidence (again, in the absence of vulnerabilities) that we booted an OS that we trusted. Hurrah!

Except. How do we know that the CPU actually did that verification? CPUs are generally manufactured without verification being enabled - different system vendors use different signing keys, so those keys ca......

Also available via the Gemini protocol at:

• gemini://gemini.techrights.org/irc-gmi/irc-log-techrights-100723.gmi
• gemini://gemini.techrights.org/irc-gmi/irc-log-100723.gmi
• gemini://gemini.techrights.org/irc-gmi/irc-log-social-100723.gmi
• gemini://gemini.techrights.org/irc-gmi/irc-log-techbytes-100723.gmi

Over HTTP:

#techrights log as HTML5	#boycottnovell log as HTML5
#boycottnovell-social log as HTML5	#techbytes log as HTML5
#techrights log as text	...

The USPSTF recommends that adults at elevated risk for lung cancer receive a low-dose CT scan each year, which was shown to reduce lung cancer deaths in the 2011 National Lung Screening Trial (NLST). The 2021 USPSTF criteria applies to adults aged 50 to 80 who have at least a 20 PY smoking history and currently smoke or have quit within the past 15 years.

For individuals who currently are not eligible for lung cancer screening, a positive test may help to identify those possibly at risk for lung cancer death, said co-corresponding author Edwin Ostrin, MD, PhD, assistant professor of general internal medicine. We envision this as a tool that could be deployed worldwide, as the future of early detection of this disease.

Lung cancer causes an estimated 25% of cancer deaths. Early detection improves prospects of survival, but most countries do not screen for it. Fewer than half of all U.S. cases are among people who are eligible under USPSTF guidelines.

Michael Shiloh had been studying tuberculosis for about two decades when he started wondering about a seemingly basic question: What makes people with TB cough? This is the diseases hallmark symptom and a main mode of transmission, but despite training as an infectious disease physician and many years of probing the pathogen as a researcher, Shiloh realized that he didnt know. A quick search of the literature suggested that essentially nothing had been studied about it, at least not at the molecular level, he says.

Elucidating the role of cough in illness means first appreciating its role in health. Cough is one of these critical defensive processes that we have to clear the respiratory system, says Stuart Mazzone, a neuroscientist at the University of Melbourne. But it also contributes to disease spread, as research by Shiloh, now at the University of Texas Southwestern Medical Center, and others has described. And dysfunctional control of coughing resulting in too much coughing or not enough can cause serious health problems.

Heres a look at how and why we cough, and some of the ways that coughing can go wrong.

The findings are published in Cancer Cell in an article titled, Evolution of immune and stromal cell states and ecotypes during gastric adenocarcinoma progression.

Understanding tumor microenvironment (TME) reprogramming in gastric adenocarcinoma (GAC) progression may uncover novel therapeutic targets, wrote the researchers. Here, we performed single-cell profiling of precancerous lesions, localized and metastatic GACs, identifying alterations in TME cell states and compositions as GAC progresses. Abundant IgA+ plasma cells exist in the premalignant microenvironment, whereas immunosuppressive myeloid and stromal subsets dominate late-stage GACs.

Gastric adenocarcinoma exhibits a high degree of heterogeneity with respect to both its phenotypes and molecular characteristics, but research around it has lagged behind other cancer types, explained Linghua Wang, MD, PhD, associate professor of genomic medicine. Most studies have concentrated on tumor cells and largely overlooked the immune and stromal cells within the tumor microenvironment, which are very dynamic and play critical roles in cancer progression. This study represents the largest single-cell RNA sequencing cohort of gastric adenocarcinoma to date and brings important new insights into how these cell populations impact disease progression.

Via: BNN: Novavax Inc (NVAX.O) announced on Friday that it had reached an agreement with Canada, under which the country would pay $349.6 million to settle the forfeiting of certain doses of the companys COVID-19 vaccine that were originally scheduled for delivery. This development comes as a result of a significant decrease in global demand []

Calling Mr. Redmond, calling Mr. Redmond

Summary: Microsoft has high demand for workers right now professional liars on demand

Bonus: The fate of Sirius Open Source was sealed when a pathological liar was appointed as CEO. Employers could not stand the lies.

This is actually an importat area and the reason for that is that the universe does not use mathematical infinity at all and none of these asymtopes ever reach zero at all.  so we do need to predict what happens as it may well be important in physics.  It may already be important and we are blind.

JOURNALISTS, not parrots

Summary: Despite it being crystal clear that the latest wave of Microsoft layoffs is international, the corporate media pretends its limited to just two cities in one single state and that these layoffs are just routine and nothing out of the ordinary

The media coverage regarding the latest Microsoft layoffs is, as expected, worse than disappointing. We just see a bunch of Microsoft PR reps (or Microsofts media operative inside newsrooms), not reporting, and weve gives some examples with editorial comments in our latest Daily Links and in Tux Machines. Wheres the actual research? One parrot parroting another parrot, parroting/citing Microsoft or a Microsoft spinner in a Microsoft-sponsored news site?

What is the job of a reporter or the job of a journalist anyway? A journalist should expose to the public facts previously unknown, e.g. suppressed by the powerful, not a bunch of tweets or what some PR department issues in a media statement. Otherwise, theres no real value in the work. That was the old way of journalism, my wife has just reminded me. Now they just wait to see whats happening in TikTok, Facebook, Twitter, theres no investigation

Its not that hard to find/fish out the facts, especially with some budget that publishers used to allocate for such work. Phone Microsoft in London, then ask something like, hi, its John from The Times, do you...

Resecurity identified the emergence of adversarial mobile Android-based Antidetect Tooling for Mobile OS-Based Fraud.

Resecurity has identified the emergence of adversarial mobile Android-based tools (called mobile anti-detects), like Enclave and McFly, as a new frontier in fraud tradecraft evolution. These tools are used by criminals involved in online-banking theft to impersonate compromised account holders and bypass anti-fraud controls by leveraging mobile client. Its crucial for fraud prevention teams to stay updated with these trends and implement robust security measures.

The tools cost between $700-$1000 and are currently designed for Android-based devices. The authors behind both tools recommend using OnePlus devices to deploy mobile anti-detect or may ship ready-to-use devices with pre-configured packages.

Both tools contain software allowing for device firmware upgrades and customized features such as fingerprint impersonation, GPS spoofing, and network anonymization. In addition, they come HuskyDG, a popular tool for rooting and customizing Android phones by installing modules containing the magiskhide module. However, its important to note that regulations in different areas require financial applications to have safeguards that prevent installation and execution on rooted devices. Still, some malicious actors continue to find ways to bypass these controls.

Mobile devices, particularly those running on Android, are now being exploited by cybercriminals. These individuals use antidetect browsers to mimic a legitimate users device fingerprint while using stolen login credentials. By doing this, they can access a victims online accounts, like a bank, using their username, password, device fingerprint, MFA token, and a local IP address close to their physical location. Antidetect software can be installed on a cybercriminals device or deliver...

• Leftovers

  • Mexico News Daily Government predicts 2 million tonnes more domestic corn in 2023

    The agricultural ministry has cited federal support for farmers as the catalyst for increasing crop yields throughout Mexico.

  • Mexico News Daily Health Ministry proposes ban on GM corn use in tortillas

    The federal government published a draft proposal Monday to modify Mexicos regulatory standards governing products made from corn dough.

  • Science

    • Android Headlines New report highlights the stress of being a tech executive

      Everyone knows that being a tech executive comes with a certain level of stress, but the ostensible payoffs seem to be worth it. Well, a new report...

A team of molecular and cellular biologists from several institutions in Taiwan and one in the Philippines has identified some of the mechanical waves involved in the regeneration of amputated tailfins in zebrafish. In their study, reported in the journal Nature Physics, the group studied zebrafish regrowth after their tailfins were removed.

Prior research has shown that many animals have the ability to regrow body parts (mostly appendages) when they are lost, typically after incidents of fighting or hunting. Prior research has also shown that for most such creatures, the amount of regrowth is proportional to the amount lost. The generation of mechanical waves are known to play a role in controlling epithelial cell expansion, the means by which new tissues are generated.

In this new effort, the researchers examined the role of wound healing in regeneration most specifically, if it is involved in positioning of the regrown tissue. To find out, the researchers closely studied the process by which new tailfins grow on zebrafish after amputation.

Read issue #252 of Lifeboat News!

Advanced neuroprosthetics are here, and they could hook our brains into the Internet of Things.

The discovery of low-level ripples throughout the universe called the gravitational wave background has set physicists looking for exotic explanations.

By Alex Wilkins

Can you really die in the digital age? Its a question that plagues performance artist Georgia Banks. Not only is this question a recurring theme in her work, but its also a concept she lives by.

Since earning a Master of Fine Arts (MFA) from the VCA in 2015, Georgia Banks has consistently skirted the boundaries between art and life through her performance-based works.

Through her practice, Banks has clinched a beauty pageant title, auctioned off the rights to her funeral, endured a crucifixion, and been sued by the estate of American artist Hannah Wilke.

targeting resource-constrained platforms, considering the systems it ran on back in the 1960s, but as time goes on, what would have given 1970s Big Iron a run for its money is now a sub-$5 microcontroller that you can run uLisp (MicroLisp) on. This particular project now even has an ARM assembler that is written in Lisp whose source code (GitHub) fits on a mere two A4-sized pages.

ULisp currently supports five platforms, being AVR-nano (ATmega328 and similar low-cost AVRs), AVR, ARM, ESP (8266 and 32), as well as RISC-V. The purpose of this assembler is to execute native ARM instructions when running on an ARM board, since uLisp itself runs a Lisp interpreter on the platform. When executed natively like this, a considerable speed-up of the task can be expected, as illustrated by a number of ARM assembler examples in the documentation.

Running a Fibonacci sequence that takes 24.6 seconds with the when ARM assembly is used instead. This shouldnt be too shocking, since this assembler essentially bypasses the Lisp runtime, coming closer to what would be the performance of firmware written in e.g. C. However, it also demonstrates that with this ARM assembler it is possible to have your Lisp and still get native performance when you want it, all using Li...

hubie writes:

A Canadian judge ruled that a thumbs-up emoji could be considered an agreement to a contract:

A Canadian judge has ordered a farmer to pay more than $CAD82,000 ($92,000) in damages following a legal battle over what the thumbs-up emoji means.

Chris Achter, the owner of a farming company in Swift Current, Saskatchewan, had sent a thumbs-up emoji in response to a photograph of a flax-buying contract from a grains buyer in 2021.

Months later, the buyer which had been doing business with Mr Achter for several years did not receive the flax as expected.

That started a dispute that led to "a far-flung search" to unearth what the thumbs-up emoji means, according to the June court ruling that surfaced in local media this week.

The buyer, South West Terminal, argued that the emoji implied acceptance of contractual terms, while Mr Achter said he used it only to indicate that he had received the contract, but not to indicate his agreement.

[...] He [the judge] said: "I am satisfied on the balance of probabilities that Chris okayed or approved the contract just like he had done before except this time he used a thumbs-up emoji."

---

Original Submission

Read more of this story at SoylentNews.

Due to their distinct perspectives, board members and CISOs often have differing views on cyber attack risks. The discrepancy arises when boards need cybersecurity expertise, need help comprehending technical jargon, or when CISOs need to communicate in business language. In this Help Net Security interview, David Christensen, CISO of PlanSource, proposes strategies to understand and acknowledge the broader organizational and strategic implications of cybersecurity risk management, strategy, and governance. Board members and CISOs often do More

The post CISO perspective on why boards dont fully grasp cyber attack risks appeared first on Help Net Security.

Apple has released Rapid Security Response updates for iOS, iPadOS, macOS, and Safari web browser to address a zero-day flaw that it said has been actively exploited in the wild. The WebKit bug, cataloged as CVE-2023-37450, could allow threat actors to achieve arbitrary code execution when processing specially crafted web content. The iPhone maker said it addressed the issue with improved checks