Security, Spoken

The internet is full of lies. That maxim has become an operating assumption for any remotely skeptical person interacting anywhere online, from Facebook and Twitter to phishing-plagued inboxes to spammy comment sections to online dating and disinformation-plagued media. Now one group of researchers has suggested the first hint of a solution: an "online polygraph" that uses machine learning to detect deception from text alone. Learn about your ad choices: dovetail.prx.org/ad-choices

Tech news you can use, in two minutes or less: Change your Facebook password Facebook acknowledged a bug that caused hundreds of millions of user passwords (dating back to 2012) for both Facebook and Instagram to be stored as readable text internally. This basically means that thousands of Facebook employees could have searched for and found them. Facebook says they weren't accessible outside of the company, and that there's no evidence employees did in fact abuse or improperly access them. Learn about your ad choices: dovetail.prx.org/ad-choices

At this point, it’s difficult to summarize all of Facebook’s privacy, misuse, and security missteps in one neat description. And it just got even harder. On Thursday, following a report by Krebs on Security, Facebook acknowledged a bug in its password management systems that caused hundreds of millions of user passwords for Facebook, Facebook Lite, and Instagram to be stored as plaintext in an internal platform. Learn about your ad choices: dovetail.prx.org/ad-choices

When school began in Lockport, New York, this past fall, the halls were lined not just with posters and lockers, but cameras. Over the summer, a brand new $4 million facial recognition system installed by the school district in the town’s eight schools from elementary to high school. The system scans the faces of students as they roam the halls, looking for faces that have been uploaded and flagged as dangerous. Learn about your ad choices: dovetail.prx.org/ad-choices

With more than 2 billion users, Android has a staggering number of devices to protect. But a "high-severity" bug that went undetected for more than five years—that attackers could exploit to spy on a user and gain access to their accounts—serves as a reminder that Android's impressive open source reach also creates challenges for defending a decentralized ecosystem. Learn about your ad choices: dovetail.prx.org/ad-choices

Steve Hardigree hadn't even gotten to the office yet, and his day was already a waking nightmare. As Googled his company's name that morning last June, Hardigree found a growing list of headlines naming the 10-person marketing firm he'd founded three years earlier, Exactis, as the source of a leak of the personal records of nearly everyone in the United States. Learn about your ad choices: dovetail.prx.org/ad-choices

As all of Washington—and the country—await the conclusion of Robert Mueller’s special counsel probe, which could come at any moment, House Speaker Nancy Pelosi put words last week to the as-yet-unspoken consensus on Capitol Hill: Impeaching the president will be a high bar. Learn about your ad choices: dovetail.prx.org/ad-choices

The world of antivirus is already fraught. You’re basically inviting all-seeing, all-knowing software onto your device, trusting that it’ll keep the bad guys out and not abuse its own access in the process. On Android, that problem is compounded by dozens of apps that aren’t just ineffective—they’re outright phony. That’s the finding of newly published research from AV-Comparatives, a European company that, as its name suggests, tests antivirus products. Learn about your ad choices: dovetail.prx.org/ad-choices

This week ended with terror, as a shooting in New Zealand took the lives of at least 49 people at two mosques in Christchurch, New Zealand. A video of the attack, livestreamed by the shooter on Facebook, quickly spread across all major internet platforms, which demonstrated a general inability to stop it. Separately, we took a look at how ICE leans on cozy relationships with local law enforcement to access license plate location data it wouldn't otherwise be allowed to. Learn about your ad choices: dovetail.prx.org/ad-choices

In January 2018 a group of hackers, now thought to be working for the North Korean state-sponsored group Lazarus, attempted to steal $110 million from the Mexican commercial bank Bancomext. That effort failed. But just a few months later, a smaller yet still elaborate series of attacks allowed hackers to siphon off 300 to 400 million pesos, or roughly $15 to $20 million from Mexican banks. Here's how they did it. Learn about your ad choices: dovetail.prx.org/ad-choices