‘What are the odds someone will find and exploit this?’ Nice one — you just released an insecure app [Mon Jun 28 2021]

Hi {NAME}, Daily Headlines - 28 June 2021 ***************************************************************** ‘What are the odds someone will find and exploit this?’ Nice one — you just released an insecure app Who’s to blame: devs or management? And how do we cure application vulnerability epidemic ***************************************************************** Off-Prem * Green MSP calls on Scottish government to stop spending £4.7m a year with AWS after Amazon 'dumping' allegations 'Public money should be going to small companies and those who need to recover from the pandemic' * Deutsche Bank stuffs Oracle systems in on-prem cloud while Google scoops lion's share of white fluffy workloads SAP banking platform still on the scene * AWS offers you the opportunity to pay cloud bills before they’ve been issued Whatever happened to cloud being a super way to preserve cashflow? It turns out that for some of you, that's not the priority Offbeat * Wish you could play tabletop Dungeons & Dragons but have no friends? Solasta: Crown of the Magister offers a solution Plus: A tale of tech woe and E3 best bits * Facebook CEO puts picture of himself wearing too much sunscreen on new board Surfboard, not corporate board. But we're sure Zuck is working on that, too * US Supreme Court rules teens cussing out schools on social media is protected speech F-bomb tirade cheerleader triumphs over school board in landmark First Amendment case * Tax check tool CEST is the pits, say UK contractor consultancies as latest HMRC usage stats are published IR35 status of 1 in 5 cases still undetermined by 'fundamentally flawed' app * Bug at payments processor WorldPay swipes £2k+ per ride ticket from Brighton Pier revellers yy/mm/dd. Yep that's £2,104.18 a ride for April beachgoers * UK competition watchdog launches investigation into fake review epidemic across Google and Amazon Refuses to give tech giants a five-star rating * Shareholders give Toshiba chairman the boot following foreign investor voting scandal Alleged exec meetings with Japanese government detailed in explosive report * BOFH: Oh for Pete’s sake. Don’t make a spectacle of yourself Just close your eyes and pretend it’s not there. Before you know it, it’ll be the weekend * USA bars imports of Chinese polysilicon due to human rights violations Made-in-Xinjiang feedstock for solar panels and semiconductors is under scrutiny * Mars race: China dreams of nuclear rockets, manned bases, and space elevators We're looking forward to the late 21st-century colony wars On-Prem * Windows Server 2022: Azure Edition slips into Public Preview Come for a dip in our cloud, the SMB over QUIC is lovely * Ouch! When the IT equipment is sound, but the setup is hole-y inappropriate Let me draw a picture for you * UK cuts ribbon on OpenRAN security and resiliency testing hubs to make sure kit works with 5G infrastructure SONIC the, er, edge... hog? * What’s the big deal with service meshes? Think of them as SDN at Layer 7 A technical yet demystifying dive into networking tech you can’t avoid Security * SolarWinds backdoor gang pwns Microsoft support agent to turn sights on customers Plus: Amazon gobbles Wickr, automakers cough to privacy blunders, and more * Jailed for seven years: Cyber-crook who broke into Big Biz to steal bank card info for FIN7 super-gang Also ordered to pay back $2.5m on his way to American cooler * AWS launches BugBust contest: Help fix a $100m problem for a $12 tshirt Did we mention you'll soon be paying to play in 30 days, too? * Dell SecureAssist contained RCE flaw allowing miscreants to remotely reflash your BIOS with code of their creation And it affects 129 models of PC and laptop... or about 30 million computers * Pull your Western Digital My Book Live NAS off the internet now if you value your files Storage giant fingers 'critical' bug allowing remote factory resets that wipe contents * Ever wondered what makes hackers tick? Find out from Kevin Mitnick at this virtual event Rubrik Data Security Talks also features Anonymous veteran, top security leaders * ‘What are the odds someone will find and exploit this?’ Nice one — you just released an insecure app Who’s to blame: devs or management? And how do we cure application vulnerability epidemic * Who would cross the Bridge of Death? Answer me these questions three! Oh and you'll need two-factor authentication I'm not the robot, pal, you are Site News * Register job ads: Devs wanted in Newcastle, opportunities for penguins in Warrington Get your CVs ready and good luck Software * Linus Torvalds launches Linux 5.13 after just seven release candidates M1 support, interesting Azure integrations and RISC-V love among notable features * Tesla shows off the AI supercomputer training what it hopes will one day be an actual self-driving car Plus: AlphaFold on drugs, and a Google Cloud AI tool to spot dodgy kit * Huawei dev flamed for 'useless' Linux kernel code contributions Time-wasting commits called out as effort to burnish submission metrics * Happy with your existing Windows 10 setup? Good, because Windows 11 could turn its nose up at your CPU If your chip's not on the list, you're not coming in. Even you, Surface Studio 2 * Backbench Tory campaigner promises judicial review of data grab of English GP patients unless UK government changes tack Trove too tempting for computer criminals while public unaware of their rights, says David Davis * The phantom of the Opera is here... unveil R5 (just don't let the boss see) She's sitting in a floating popout window for video calls while you get on with your life * Will containers kill VMs? There are no winners in this debate Reg readers couldn’t split the argument – perhaps because we kept coming back to containers inside VMs being sensible * BMA warns NHS Digital's own confidentiality guardian could halt English GP data grab unless communication with public improves Data law's transparency requirement currently not being met, according to powerful doctors' union * Google creates 'optimized' Android for one smartphone — that will only be sold in India No word on what this means for Android Go or Android One, but Indian mega-carrier Jio is excited about over-the-air updates, Google Assistant and more ------------------------------------------------------------------------ This email was sent to {EMAIL} You can update your preferences here: or unsubscribe from this list: Situation Publishing Ltd, 315 Montgomery Street, 9th & 10th Floors, San Francisco, CA 94104, USA The Register and its contents are Copyright © 2021 Situation Publishing. All rights reserved. Find our Privacy Policy here: