пятница, 5 июня 2015 г.

uTesla Will Pay You Up To $1000 To Break Their Website — But Don’t Try It On The Carsr


4 4 4 9

  • If there is one truism we can count on in the digital era, it is that everything has bugs. No matter how carefully designed or nominally secure something is, someone, somewhere, can find a vulnerability in it.

    Thus the development of the “bug bounty.” If you can’t beat ’em, join ’em: go ahead and encourage people to find flaws in your software, and then give them lots of money when they turn those flaws over to you. It’s a simple way to tackle a whole bunch of problems at once: with crowdsourced QA, you get more eyes looking. And with a bounty attached, you make it easy, lucrative, and desirable for the hackers who find them to be helpful white-hat types who clue you in instead of selling or abusing the information.

    Electric automaker Tesla is now the newest tech company to offer a bug bounty program to its users, Forbes reports. The car (and energy) company is using an online platform called Bugcrowd to offer users between $25 and $1000 for every vulnerability they find.

    Like United, however, Tesla is only asking bug hunters to look for vulnerabilities in their website — not in their vehicles. Anyone who does find a vulnerability in the car’s software is requested to contact Tesla directly, instead of using the crowdsourced platform.

    As Forbes suggests, tampering with a website is one thing — but tampering with a car is another. Accidentally crashing a website doesn’t kill people. Messing with the systems under the hood of the hardware, so to speak, could be much more risky. And if someone does muck around with their car software at Tesla’s urging, and someone is hurt or killed as a result, Tesla could find itself in hot legal water.

    Tesla Offers To Pay Hackers $1,000 To Find Its Web Weaknesses, But What About Its Cars? [Forbes]



ribbi
  • by Kate Cox
  • via Consumerist


uReports Show NHTSA Failed At First To Properly Investigate GM’s Ignition Switch Defectr


4 4 4 9
  • Recently released internal reports from the National Highway Traffic Safety Administration show that for nearly a decade the agency did little to adequately address concerns regarding the deadly General Motors ignition switch defect.

    The Detroit News reports that two reports released on Friday harshly criticize NHTSA for its failure in holding the automaker accountable for a defect that has since been linked to 109 deaths and more than 200 injuries.

    The defect, which affects more than 2.6 million vehicles, involves ignition switches that can easily be turned into the “off” position because the switch is bumped by the driver’s knee or because the key is attached to a heavy keychain. When this happens, the vehicle’s engine stops and there is no power steering or power brakes. Most importantly, the airbags will not function, so if the car crashes after a stall-out, the airbags will not deploy.

    According to the internal reports, since at least 2005 – nine years before the initiation of a recall – NHTSA failed to fully grasp the seriousness of the situation and designate needed resources to investigate the non-deployment of airbags in GM vehicles.

    The first report, titled “NHTSA’s Path Forward,” found that while GM could have been more forthcoming about the long-concealed defect, NHTSA shoulders some of the blame for unintentionally dismissing routes of inquiry and failing to share information among its own investigators that likely could have located the deadly issue earlier.

    Many of NHTSA’s problems with the investigation stemmed from its failure to hold GM responsible for providing adequate information to the agency, according to the report.

    Despite the fact that GM’s responses to inquires about the defect contained “very little information and included invocations of legal privilege,” the report found that NHTSA did not “push back and request information.”

    Additionally, NHTSA “discounted” and failed to “fully investigate” alternative theories proposed by internal and external sources when it came to finding the root cause of the GM airbags’ non-deployment.

    When it came to NHTSA’s robust consumer complaint database and its own investigations into the issue, the reports found the agency “did not identify and follow-up on trends.”

    The report also noted that neither NTHSA nor GM actually fully understood how the vehicles’ advanced airbag technology worked. The two entities incorrectly believed at the time that the airbags would still deploy during a crash even if the key was inadvertently switched out of the “run” position.

    Because this system was misunderstood by the regulator, the report found that other avenues of inquiry were disregarded.

    As for the agency’s own post-crash investigations, the report found those details were not always shared between division, creating a disconnect in the overall inquiry into GM.

    The second internal report focused mainly on describing what funding and personnel increases the agency needs in order for its Office of Defects Investigations to make a “much larger and more proactive presence in the automotive safety arena.”

    “Our obligation to save lives and prevent injuries must include sober self-examination, and when we find weaknesses, we have to fix them,” NHTSA head Mark Rosekind – who took over the position in January – tells the Detroit News. “These reports outline how NHTSA is already improving its systems for identifying and addressing vehicle safety defects, and offers options for building the workforce it needs to meet its obligations to the traveling public.”

    Rosekind said that while the reports provide a scathing review of the agency, no one has been fired or disciplined for the failures.

    Transportation Secretary Anthony Foxx said that NTHSA has already been working to learn from the GM debacle.

    “NHTSA has identified improvements, some already in progress and some we plan to make, to better investigate, identify and remedy defects that threaten public safety,” Foxx said. “With the [Safety Systems Team], we are enlisting three of the most experienced and knowledgeable safety professionals in the world to help us implement these changes. And with the Risk Control Innovations Program, we are breaking down stovepipes and reaching into offices from across NHTSA to address safety risks.”

    The agency has taken other steps to improve its accountability and investigative capabilities including challenging assumptions, exploring a broad range of alternative theories and implementing a systems safety approach to defect investigations.

    “This approach requires investigators to study and understand how vehicle systems interact and interrelate and directs them to examine possible explanations (even seemingly remote ones) of a safety issue to help determine whether a defect may exist,” NHTSA said in the report.

    Senators Ed Markey of Massachusetts and Richard Blumenthal of Connecticut – who have criticized NHTSA’s actions over the past year – say the reports’ findings are a start when it comes to the agency taking responsibility for its failures.

    “Unfortunately, for more than a decade, NHTSA failed to address the information and evidence it had in its own database linking defective ignition switch to fatal accidents,” they said in a statement to the Detroit News.

    NHTSA admits faults in GM investigation [The Detroit News]



ribbi
  • by Ashlee Kieler
  • via Consumerist


uGoogle Issues First Monthly Report On Traffic Incidents Involving Its Self-Driving Carsr


4 4 4 9
  • Before Google’s self-driving cars become an everyday reality for consumers, the company not only needs to test the vehicles extensively, but it also has to make sure the public isn’t put off over concerns that the technology is unsafe. Amid recent reports that they’ve already been in minor accidents, Google has has now started releasing public reports detailing traffic incidents involving its driverless cars.

    The first report [PDF] just came out, with information for the month of May and up through June 3 included, as well as data on all collisions before now.

    Google says most of the reported incidents involve other cars rear-ending the driverless vehicles, while other collisions involved cars side-swiping Google vehicles or hitting them after failing to stop at stop signs, the reports says.

    None of those prior accidents have been its car’s fault, Google says.

    “In the six years of our project, we’ve been involved in 12 minor accidents during more than 1.8 million miles of autonomous and manual driving combined,” Google writes. “Not once was the self-driving car the cause of the accident.”

    There will be more cars to report on soon, as well: Later this summer, Google’s newest prototypes will be heading for public roads near the company’s offices in Mountain View, CA.



ribbi
  • by Mary Beth Quirk
  • via Consumerist


uAT&T No Longer Offering 2-Year Contracts On iPhone Through Apple Online Storer


4 4 4 9
  • att_applestoreAre you a current or future iPhone user who enjoys going right to the Apple Store to buy your new device when it’s time to upgrade? You’re going to have to go with Sprint or Verizon in the future if that’s the case: AT&T is no longer offering subsidized devices when you buy your phone through Apple.

    This isn’t an sign that AT&T is thinking about getting rid of subsidies entirely, but carriers would rather we paid for our expensive smartphones ourselves. Of course, you’re welcome to visit an AT&T store or authorized retailer, or even to order your phone from the AT&T website.

    If you insist on purchasing from the online Apple Store, though, are an unlocked phone for $649 up front, or using the carrier’s Next installment plan, where you pay the full retail price of the phone in interest-free installments over 12, 18, or 24 months. We don’t know yet whether this also applies to purchases from in-person Apple Stores.

    AT&T clearly prefers this model to the subsidy: they offer discounts on service for Next customers. If you’re a customer dating back to when AT&T was the exclusive carrier for the iPhone and you’re used to paying $200-$300 every year for a new phone, you can still visit an AT&T store.

    storage

    What Apple and AT&T aren’t emphasizing is the total cost of the phone: while the SIM-free and T-Mobile models have the full price right there, AT&T differentiates the prices by only telling you the amount of the monthly payment, not the total.

    Apple Online Store stops offering iPhone with 2-year AT&T contract [AppleInsider]



ribbi
  • by Laura Northrup
  • via Consumerist


uWoman Suing Ebay Claims She Owns The Sun, Has The Right To Sell Real Estate Therer


4 4 4 9
  • Although no sovereign nation can claim ownership over any celestial bodies, one woman is taking eBay to court, saying she has the right to sell real estate on the Sun. As in, that big fiery ball up in the sky where no one could possibly live.

    A woman from the Galicia region of Spain has claimed ownership of the Sun since 2010, and has been selling it off for about a buck a square meter, reports the Daily Mail. Eventually eBay blocked her account, because you know, she doesn’t actually own the Sun and therefore, should not be selling nothing to people.

    But she’s now won the right to take the company to court, suing for about $11,000. She claims eBay took commissions on her sales but didn’t let her collect her earnings from a reported 600 orders of Sun.

    “There was no snag, I backed my claim legally, I am not stupid, I know the law. I did it but anyone else could have done it, it simply occurred to me first,” the woman told the Daily Mail back in 2010.

    In her point of view, just because the Outer Space Treaty prohibits a sovereign nation from owning a celestial body, it says nothing about individuals claiming those um, properties. She says she was inspired by a U.S. entrepreneur who registered several planets under his own name in 2010 and made more than $10 million selling land on the moon, Mars, Venus and Mercury.

    To support her claim on the Sun, she has a notary public document that declares her to be “the owner of the Sun, a star of spectral type G2, located in the centre of the solar system, located at an average distance from Earth of about 149,600,000 kilometers.”

    The case will focus on eBay’s seller agreement and whether or not she was in breach of that policy. The company reportedly tried to settle out of court, but it appears that attempt was not successful.

    The so-called owner of the Sun says she will continue to sell parcels of it via her own website.

    What the blazes? Spanish woman selling plots of land on the sun for £1 sues eBay for breach of contract after the auction site closes her down [Daily Mail]



ribbi
  • by Mary Beth Quirk
  • via Consumerist


uThere Might Be Fewer Available Seats On Your Next Delta Or United Flightr


4 4 4 9
  • At least two major U.S. airlines are looking at the possibility of cutting the number of seats offered on flights later this year; a move that could make it more difficult and more expensive for travelers to get to and fro.

    Bloomberg reports that Delta Air Lines and United Continental Holdings are mulling the idea of cutting seats later this year over concerns that there is currently an overabundance of available accommodations.

    Delta implied during an investor conference on Thursday that it had a “bias” toward reducing seating capacity after the summer months.

    The airline’s allusion to a reduction comes just after it announced that passenger revenue from each seat flown a mile would drop more than previously anticipated, Bloomberg reports.

    Following Delta’s announcement, United said it would look “very closely” at its available seats for the winter travel season.

    An executive of the airline said if it chooses to shrink seating capacity, it may reduce the size of jets on some routes.

    Both companies say they will continue to monitor the U.S. economy and competitor’s prices in certain markets before making a decision.

    Booking a seat on United, Delta could get tougher—and pricier [Bloomberg]



ribbi
  • by Ashlee Kieler
  • via Consumerist


uMan Legally Changes His Name Just To Avoid Airline Booking Error Feer


4 4 4 9
  • Because you can’t just fly under anyone’s name, some airlines institute a fee for travelers seeking to change the name on their already purchased ticket to ward against reselling them for a profit. But not everyone wants to pay for mistakes, like one student who decided he’d rather spend the money to change his name and get a new passport than pay Ryanair to fix a booking error.

    The 19-year-old changed his surname by deed poll and paid £103, The Sun reported (via MarketWatch), because it was cheaper than the £220 he would’ve had to pay to amend the name.

    He says his girlfriend’s stepfather initiated the chain of events that led to his new moniker when he booked him a flight with the wrong last name, all because of a joke he made on Facebook. See, he’s a fan of a certain superhero, and goes by that hero’s name on Facebook, which is where his girlfriend’s father apparently got the name from.

    “Customers are asked to ensure that the details they enter at the time of booking are correct before completing their booking and we offer a 24 hour ‘grace period’ to correct minor booking errors,” Ryanair said in a statement.

    This man legally changed his name to avoid booking error fee on Ryanair [MarketWatch]



ribbi
  • by Mary Beth Quirk
  • via Consumerist