• Risks Digest 31.60 (2/2)

    From RISKS List Owner@21:1/5 to All on Fri Mar 6 16:49:41 2020
    [continued from previous message]

    <https://www.technologyreview.com/s/615290/how-to-prepare-for-the-coronavirus-covid19/>,
    Baskin, an artist in San Francisco, realized that people using face masks to protect themselves from infection would have trouble unlocking phones that
    use facial recognition. (This has indeed been a problem <https://www.abacusnews.com/tech/facial-recognition-fails-china-people-wear-masks-avoid-coronavirus/article/3048006>.)
    She quickly created a prototype of a mask printed with a face -- not *your* face, but rather unique faces of imaginary people generated using artificial intelligence <https://www.thispersondoesnotexist.com/> -- and posted her
    idea on Twitter <https://twitter.com/djbaskin/status/1228798382598000640>: ``Protect people from viral epidemics while still being able to unlock your phone.''

    The demand was immediate. Those interested in the idea include cancer
    patients who want to customize their masks, doctors who work in children's hospitals and don't want to scare kids -- and people in China. Her invention was picked up by Chinese media, and now her waiting list has over 2,000
    people on it, many of them with Chinese email accounts. And it's not just a request for one or two masks each: one potential customer requested 10,000 masks. Eight people asked if they could be her distributor. Baskin won't be fulfilling these orders for a while -- there's a global mask shortage right
    now -- but the masks do work, as long as you set FaceID to recognize you when you're wearing it.

    ``I think these are so cool as a social object and art object,'' says
    Robert Furberg, a researcher who studies biometrics in health care. ``It's
    the fusion of something threatening and protective at the same time, and I
    just find that so compelling.'' He is one of those who reached out to
    Baskin; his wife is a nurse and has complained about the inconvenience of
    masks and FaceID. For him, the demand itself is a form of social commentary: ``It's just so 2020.''

    But while most people are simply concerned about being able to use their
    phones while wearing a mask, they may discover a surprising bonus. Baskin
    says there's an element of *anti*-surveillance built in. ``[The mask]
    appears to be working with facial recognition, but it will never actually be your face,'' she says. It's tricking the technology and protecting your biometric information: ``The image is something your friends could identify
    as you but that machine learning can't, and it shows that face recognition
    has errors.'' Art against surveillance

    Arty anti-surveillance devices and techniques have become more popular in recent years, from anti-facial-recognition face paint to an *invisibility cloak* <https://arxiv.org/abs/1910.14667> that can block object detectors;
    from the Adversarial Fashion line that confuses automated license plate
    readers <https://www.technologyreview.com/f/614175/a-new-clothing-line-confuses-automated-license-plate-readers/>
    to the simple face masks that protesters in Hong Kong and India have used to hide their face from cameras. The media reports breathlessly <https://www.businessinsider.com/clothes-accessories-that-outsmart-facial-recognition-tech-2019-10#images-from-echizens-lab-shows-how-the-visor-blocks-ais-ability-to-detect-a-face-6>
    on each advance, but for the most part, they are more political commentary
    than useful tactics for the average person <https://slate.com/technology/2019/08/facial-recognition-surveillance-fashion-hong-kong.html>.
    Those projects, in fact, might be less helpful if they went mainstream,
    because wide adoption could lead to an arms race that enables the invasive technology to route around defenses. [...]

    https://www.technologyreview.com/s/615302/how-coronavirus-turned-the-dystopian-joke-of-faceid-masks-into-a-reality/

    ------------------------------

    Date: Tue, 3 Mar 2020 09:27:28 +0000
    From: paul cornish <paul.a.cornish@googlemail.com>
    Subject: The Computer Says No! UCLA face recognition

    To counter the plans to use face recognition on campus 400 photos of staff
    and athletes were run through a facial recognition system (Amazon's)
    comparing to a mugshot database with the result that 58 of them were incorrectly matched. The majority of the incorrect matches were people of colour.

    https://www.fightforthefuture.org/news/2020-02-19-backlash-forces-ucla-to-abandon-plans-for-facial-recognition-surveillance-on-campus-ebe005e3f715/

    ------------------------------

    Date: Tue, 25 Feb 2020 10:39:58 -0800
    From: Richard Stein <rmstein@ieee.org>
    Subject: AI baby monitors attract anxious parents: Fear is the quickest
    way to get people's attention (WashPost)

    https://www.washingtonpost.com/technology/2020/02/25/ai-baby-monitors/

    ``This style of technology could also follow babies beyond the crib. The electronics firm ViewSonic said last month that it was building a whiteboard-mounted 'mood sensing' device that could monitor students and
    alert teachers as to how engaged a class may be. The company's chief
    technology officer, Craig Scott, said in a statement that the system was
    still in early development but was being designed to 'improve class performance.'

    ``But this level of computer-aided surveillance, Brooks said, can also have
    a corrosive effect on parents' sense of self-worth and state of mind. The devices, she said, send the message that parents have failed if they don’t watch their baby at every turn.

    ``We have this mind-set, this mentality, that when kids are involved, we don’t have to be rational. Any risk mitigation is worth the cost we have to pay,'' Brooks said. But the system ``undermines parents' feelings of basic competence: that they can't trust themselves to take care of their babies without a piece of $500 equipment.''

    I'm feeling safer already: Cradle-to-grave surveillance built for a
    surveillance economy. This baby monitor stirs paranoia like "fluoride in
    childrens' ice cream." (Per General Jack D. Ripper of "Dr. Strangelove.")

    ------------------------------

    Date: Fri, 28 Feb 2020 18:15:55 -0500
    From: Gabe Goldberg <gabe@gabegold.com>
    Subject: How North Korean Hackers Rob Banks Around the World (WIRED)

    They scored $80 million by tricking a network into routing funds to Sri
    Lanka and the Philippines and then using a *money mule* to pick up the cash.

    The bills are called supernotes. Their composition is three-quarters cotton
    and one-quarter linen paper, a challenging combination to produce. Tucked within each note are the requisite red and blue security fibers. The
    security stripe is exactly where it should be and, upon close inspection, so
    is the watermark. Ben Franklin's apprehensive look is perfect, and betrays
    no indication that the currency, supposedly worth one hundred dollars, is
    fake.

    Most systems designed to catch forgeries fail to detect the supernotes. The massive counterfeiting effort that produced these bills appears to have
    lasted decades. Many observers tie the fake bills to North Korea, and some
    even hold former leader Kim Jong-Il personally responsible, citing a
    supposed order he gave in the 1970s, early in his rise to power. Fake
    hundreds, he reasoned, would simultaneously give the regime much-needed hard currency and undermine the integrity of the US economy. The self-serving
    fraud was also an attempt at destabilization.

    https://www.wired.com/story/how-north-korea-robs-banks-around-world/

    ------------------------------

    Date: Sat, 22 Feb 2020 15:54:29 -0500
    From: Gabe Goldberg <gabe@gabegold.com>
    Subject: Fido Alliance gets backing from Apple to replace passwords
    (9to5Mac)

    The Fido Alliance, an organization committed to eliminating the need for passwords, received a big boost last week when Apple signed up as a board member. Fido stands for Fast IDentity Online.

    Apple apparently wasn't ready to announce its support immediately, as tweets from a Fido Alliance conference were quickly deleted, but as of today, the
    news is official.

    French site MacG spotted a now-deleted tweet that had a photo (below) of a conference slide showing the Apple logo and the text ‘New Board Member.'

    While that tweet didn't stay up for long, Apple has today been added to the official website as a board-level member, alongside such tech companies as Amazon, Arm, Facebook, Google, Intel, Microsoft, and Samsung. A number of big-name finance companies are also board members, including American
    Express, ING, Mastercard, Paypal, Visa, and Wells Fargo.

    https://9to5mac.com/2020/02/11/fido-alliance/

    ------------------------------

    Date: Sun, 23 Feb 2020 08:39:44 -0800
    From: Richard M Stein <rmstein@ieee.org>
    Subject: 911 operators couldn't trace the location of a dying
    student's phone. It's a growing issue. (WashPost)

    https://www.washingtonpost.com/health/2020/02/22/student-died-911-call-location/

    The case highlights issues that have plagued 911 phone systems across the country since the advent of smartphones. Cellphone privacy settings and outdated dispatch mapping systems continue to frustrate first responders
    when they can't find callers.

    Landline numbers are much easier for these systems to pinpoint. But over 80 percent of the calls to the nation's 911 centers are from cellphones, The Washington Post has previously reported.

    The Federal Communications Commission has required cellphone carriers to improve the transfer of information to 911 centers. The carriers have until 2021 to make sure transmitted locations are within 50 yards 80 percent of
    the time.

    Some injuries prevent precise location disclosure. Geolocation exactitude
    is a requirement for first-responder timeliness. There are cracks in the
    surveillance economy: a foreign registered cellphone, used domestically
    (in the US, for now at least), does not possess a locally resolvable name
    or resident address.

    ------------------------------

    Date: Wed, 26 Feb 2020 11:45:43 -0500 (EST)
    From: ACM TechNews <technews-editor@acm.org>
    Subject: Rice University Boosts 'Internet of Things' Security -- Again

    Mike Williams, Rice University, 18 Feb 2020

    Researchers at Rice University have developed a technique to improve
    security for Internet of Things (IoT) devices significantly, while using far less energy. The new technique is a hardware solution based on the power management circuitry found in most central processing chips. The method leverages power regulators to muddle information leaked by the power consumption of encryption circuits. A breakthrough last year by the team generated paired security keys based on fingerprint-like defects unique to every computer chip. ``This year, the story is similar, but we are not generating keys,'' said Rice's Kaiyuan Yang. ``We are looking at defending against a new type of attack that is specifically for IoT and mobile
    systems.'' https://orange.hosting.lsoft.com/trk/click?ref=znwrbbrs9_6-240c1x220a09x070995&

    ------------------------------

    Date: Mon, 2 Mar 2020 21:46:08 -0500
    From: Chuck Weinstock <weinstock@conjelco.com>
    Subject: Startup's Stock Trading App experiences a day-long outage on one of
    the busiest trading days of the year (Tech Crunch)

    Quoting in pa rt from TechCrunch: https://techcrunch.com/2020/03/02/robinhood-suffers-prolonged-outage-on-the-day-the-dow-enjoyed-its-single-biggest-point-gain/
    <https://techcrunch.com/2020/03/02/robinhood-suffers-prolonged-outage-on-the-day-the-dow-enjoyed-its-single-biggest-point-gain/>

    Robinhood, the startup with a stock trading app ..., suffered one of its
    worst outages on one of the busiest trading days of the year.

    As the Dow Jones Industrial Average enjoyed the single biggest point-gain in the history of the index, Robinhood's application fell prey to an error that locked users out of the service for the duration of Monday's trading.

    One potential cause of the outages could just be the high trading volumes
    that have accompanied highly volatile markets over the past month. While
    there were some early reports that the bug was caused by a Leap Day bug, the company has denied that a February 29th error was at fault.

    The company's mistake could cost its users lots of money as they sought to trade on stocks that were hit in last week's string of losses due to
    investor worries over the impact the novel coronavirus, COVID-19, would have
    on the global economy.

    The company said ``We don't have an estimate when the issue will be resolved but all of us at Robinhood are working as hard as we can to resume
    service.''

    I became aware of this because of a friend who had successfully bet (via options), last week, that the market would go down significantly over virus fears. When he went to sell his options today he could not because of the Robinhood failure. I do not want to make light of his pain, but it would be ironic if he suffered this loss because of a virus.

    [See also https://gizmodo.com/stock-trading-app-robinhood-experiences-widespread-outa-1842042516
    ]

    ------------------------------

    Date: Wed, 26 Feb 2020 09:04:55 -0800
    From: Richard Stein <rmstein@ieee.org>
    Subject: Government-Run Energy Company Keeps Reeling in the Same Employees
    in Phishing Training (nextgov.com)

    https://www.nextgov.com/cybersecurity/2020/02/government-run-energy-company-keeps-reeling-same-employees-phishing-training/163323/

    Personal accountability for failure to prevent phishing assault is a common problem in industry, government, and non-profit organizations.

    Employment laws prevent penalties: demotion, fines, dismissal for cause
    though the brand outrage arising from these incidents can be severe.

    The essay raises important questions about *repeat offenders* -- those individuals who neglect to practice IT hygiene for lack of competence, professionalism, or incautious actions.

    Given that phishing is unlikely to decay in frequency, education appears to
    be the only means to suppress it. If the CEO activates a phished assault,
    the mess gets cleaned up and communication lockdown is enforced -- until it leaks to the press. If general slave #6 initiates it, what do most organizations do? Promote the individual?

    Risk: Weak organizational deterrence against IT threats.

    ------------------------------

    Date: Wed, 26 Feb 2020 20:48:46 -0500
    From: Gabe Goldberg <gabe@gabegold.com>
    Subject: Clearview AI has billions of our photos. Its entire client list was
    just stolen (CNN Business)

    Clearview AI, a startup that compiles billions of photos for facial
    recognition technology, said it lost its entire client list to hackers. The company said it has patched the unspecified flaw that allowed the breach to happen.

    In a statement, Clearview AI's attorney Tor Ekeland said that while security
    is the company's top priority, ``Unfortunately, data breaches are a part of life. Our servers were never accessed.'' He added that the company continues
    to strengthen its security procedures and that the flaw has been patched.

    Clearview AI continues ``to work to strengthen our security,'' Ekeland said.

    https://www.cnn.com/2020/02/26/tech/clearview-ai-hack/index.html

    Too late, maybe?

    ------------------------------

    Date: Thu, 27 Feb 2020 00:06:39 -0500
    From: Gabe Goldberg <gabe@gabegold.com>
    Subject: Afraid of the Thirteenth Floor? Superstition and Real Estate,
    Part 2 (Skeptical Inquirer)

    The author writes:

    In my January column, I described the influence of feng shui on the Chinese real estate market. Although it would be hard to match the pervasive
    influence of traditional Chinese superstition in real estate and other areas
    of commerce, the Chinese are not alone. One of the most interesting survey results I've ever come across is a 2007 Gallup poll that showed 13 percent
    of American adults would be bothered if given a hotel room on the thirteenth floor (Carroll 2007). Thirteen percent. Furthermore, nine percent of respondents said they would be bothered enough to ask for a different
    room. As is the case for many traditional superstitions, the majority of
    those who said they would be bothered were women. https://news.gallup.com/poll/26887/thirteen-percent-americans-bothered-stay-hotels-13th-floor.aspx
    https://skepticalinquirer.org/exclusive/afraid-of-the-thirteenth-floor-superstition-and-real-estate-part-2/

    The risk? At best (and not very good):

    We're hard-wired to connect dots. When Thing 1 happens, and then Thing 2 happens, we humans are very likely to conclude that Thing 1 caused Thing 2, even if they're completely unrelated; it's a phenomenon psychologists call
    the *illusion of causality*. <https://www.ncbi.nlm.nih.gov/pmc/articles/PMC4488611/>

    https://www.washingtonpost.com/lifestyle/food/when-it-comes-to-nutrition-were-all-too-eager-to-ignore-the-evidence-heres-why/2020/02/23/d4dd8534-54a8-11ea-9e47-59804be1dcfb_story.html

    ------------------------------

    Date: Thu, 27 Feb 2020 12:29:32 -0500
    From: Gabe Goldberg <gabe@gabegold.com>
    Subject: Hilton drags corporate feet, minimizes disclosing personal data
    held

    From a friend... I guess Virginians lose. For those image-challenged,
    Hilton offers, ``Some regional, national, state laws confer certain rights relating to personal data.'' But answers request from Virginia, ``We're
    sorry! Only certain states afford rights relating to personal data to their residents.''

    ------------------------------

    Date: Fri, 28 Feb 2020 00:18:12 -0500
    From: Gabe Goldberg <gabe@gabegold.com>
    Subject: How a Hacker's Mom Broke Into a Prison -- and the Warden's Computer
    (WiReD)

    Security analyst John Strand had a contract to test a correctional
    facility's defenses. He sent the best person for the job: his mother.

    https://www.wired.com/story/hackers-mom-broke-into-prison-wardens-computer/

    The risk? Mom.

    ------------------------------

    Date: Tue, 25 Feb 2020 19:45:38 -0500
    From: David Lesher <wb8foz@panix.com>
    Subject: Old RISKS risks are still in vogue

    No backups; open and under appeal cases affected: ``The computer did it!''

    <https://www.wxyz.com/news/local-news/investigations/its-a-big-problem-years-of-x-ray-evidence-disappeared-from-the-wayne-co-medical-examiners-office>

    ------------------------------

    Date: Sat, 29 Feb 2020 01:30:54 -0500 (EST)
    From: Mark Brader <msb@Vex.Net>
    Subject: Risks of Leap Years and Dumb Digital Watches

    All right now, how many people reading this:

    [1] saw a previous version of this message in RISKS-6.34, 13.21, 17.81,
    20.83, 23.24, 25.07, 26.75, and/or 29.30;

    [2] still wear a wristwatch instead of using a cellphone or something
    as a pocket watch;

    [3] have the kind that needs to be set back a day because (unlike the
    smarter types that track the year or receive information from
    external sources) it went directly from February 28 to March 1;

    and

    [4] *hadn't realized it yet*?

    Personally, I realized about 20 minutes ago, and am going to set it back now.

    [Leap Year and Mark Brader Strike Again. PGN]

    ------------------------------

    Date: Mon, 24 Feb 2020 04:58:18 -0500
    From: Monty Solomon <monty@roscom.com>
    Subject: TikTok Challenges, Ranked by How Likely They Are to Maim or Kill
    You (Vice)

    The *skull breaker* challenge is, somehow, not even the most terrifying
    thing happening on this app.

    https://www.vice.com/en_us/article/m7q988/what-are-the-most-dangerous-tiktok-challenges-skullbreaker-cha-cha-slide-bright-eye

    ------------------------------

    Date: Mon, 24 Feb 2020 09:04:30 -0800
    From: Richard Stein <rmstein@ieee.org>
    Subject: Algorithm Targets Marijuana Convictions Eligible To Be Cleared
    (npr.org)

    https://www.npr.org/2020/02/23/808575012/algorithm-targets-marijuana-convictions-eligible-to-be-cleared

    ``Code for America saw an opportunity: To help clear the backlog of some 220,000 cases, the organization developed an algorithm to identify which residents qualify to have their records cleared or reduced. Now, district attorneys across the state are crediting the group with expediting an
    otherwise slow and tedious process.''

    Mass exoneration or mass incarceration. Batch processing saves individual adjudication costs. Trust that the algorithm doesn't *overlook an innocent case. Data fallout/dropout is a common occurrence in big business. This situation certainly exemplifies the situation. Albeit, it is one-off usage.

    Risk: Mass exoneration by algorithmic fiat.

    ------------------------------

    Date: Mon, 24 Feb 2020 17:59:07 -0800
    From: Richard Stein <rmstein@ieee.org>
    Subject: Would you eat a 'steak' printed by robots? (bbc.com)

    https://www.bbc.com/news/business-51263266

    Would the personnel that trained or coded the robot that manufactures the steak, and their families, consume it for a few months before the public
    bought it? Can a 3D steak printing robot offer a bias-free taste-test
    opinion? Will it always answer, ``What's the beef about the printed beef?''

    Risk: Sanitation, nutrition, and safety of 3D printed foods and components
    sold for human consumption.

    ------------------------------

    Date: Mon, 24 Feb 2020 23:40:12 -0500
    From: Monty Solomon <monty@roscom.com>
    Subject: 'They lied to us': Mom says police deceived her to get her DNA
    and charge her son with murder

    A murder case raises the question: Is it OK for police to lie to get an innocent person's DNA?

    https://www.nbcnews.com/news/us-news/they-lied-us-mom-says-police-deceived-her-get-her-n1140696

    ------------------------------

    Date: Tue, 25 Feb 2020 07:08:26 -0700
    From: Jim Reisert AD1C <jjreisert@alum.mit.edu>
    Subject: Taxes are expected to rise in Taunton, MA after an assessing tech
    snafu (Christopher Gavin)

    Christopher Gavin, *The Boston Globe*, 24 Feb 2020 https://www.boston.com/news/local-news/2020/02/24/error-taxes-taunton

    A seemingly small line error has created a major problem for Taunton's
    assessors — and it's going to cost taxpayers. Officials were forced to
    essentially reboot their billing process after a software upgrade meant
    that local public school property was added to the list of taxable
    properties, they say.

    The snafu came when the non-profit Head Start building, adjacent to
    Taunton High School, was added to the system as a taxable property, which
    generated invoices for all of the school buildings at the site, Assessor
    Richard Conti told the City Council last week.

    The assessed value of Taunton's commercial and industrial properties shot
    up by $136,846,200, at least on paper. The school property was then logged
    as being on the hook for $4.2 million in taxes for what is nontaxable
    property, Conti said.

    The oversight was only caught when the school superintendent sent the
    bills back to the assessor's office. ``This all happened as a result of a
    perfect storm of errors that went into sequence that no one has ever
    experienced before,'' Conti said during the Feb. 18 meeting. ``This
    happened in a manner that none of our peers, none of the people in the
    Department of Revenue would have caught because of the software.''

    ------------------------------

    Date: Tue, 25 Feb 2020 15:46:51 -0800
    From: Richard Stein <rmstein@ieee.org>
    Subject: Pets 'go hungry' after smart feeder goes offline (bbc.com)

    https://www.bbc.com/news/technology-51628795

    A pet-sitter's career remains safe from redundancy as long as Internet-based pet feeders are purchased.

    ------------------------------

    Date: Mon, 02 Mar 2020 06:53:30 +0800
    From: Dan Jacobson <jidanni@jidanni.org>
    Subject: Emissions possible: Streaming music swells carbon footprints
    (Al Jazeera)

    Watching films and listening to music online produces more greenhouse
    gas emissions than many realise. https://www.aljazeera.com/ajimpact/carbon-big-foot-climate-impact-streaming-music-videos-200221220408755.html

    ------------------------------

    Date: Wed, 26 Feb 2020 14:40:30 +0000
    From: John Stockton <dr.j.r.stockton@gmail.com>
    Subject: Re: Linux is ready for the end of time (ZDNet, RISKS-31.58)

    Large error!!!

    Risks Digest has correctly quoted the ZDNet article, which says that 64-bit Linux runs out of seconds in the year 29,227,702,659.

    But I believed that we have about ten times longer to wait, and that the
    true S2^63 instant is about AD 292,277,026,596-12-04 Sun 15:30:08 GMT (Gregorian) .

    I find that, by Firefox JavaScript and by Windows Calculator, that
    (2^63)/(60*60*24*365.2425) + 1970 is 292277026596.9277 , to 4 decimal places.

    ZDNet dropped the final 6 of the year count.

    But I now see that my date/time above, which the ZDNet author might have
    seen a copy of, cannot be quite right; 1970 and ...6596 are manifestly in different phases of the 400-year cycle of the secular Gregorian Calendar,
    and therefore the value 365.2425 is not precisely suitable.

    The moral is that a reader should, whenever possible, check any printed
    figure to see whether it is, at least, perhaps right.

    ------------------------------

    Date: Sat, 22 Feb 2020 17:00:13 -0600
    From: "Craig S. Cottingham" <craig.cottingham@gmail.com>
    Subject: Re: Mysterious GPS outages are wracking the shipping industry
    (Fortune, RISKS-31.59)

    Is basic maritime navigation no longer taught to merchant crew? I've never navigated in open water, but I still know some of the basics, like how to
    read a compass, to leave green navigation markers to port and red to
    starboard, etc.

    As far as other vessels go, they should be clearly marked and lit —- red light on the port side, green on the starboard, white light on the stern and
    I believe at the top of the mast, and the *rules of the road* clearly state
    to which side you should leave the other vessel if your courses appear to intersect. Calling out *NATO and Russian warships* specifically is a form of scare words -- they should be marked and lit like any other vessel, unless operating under wartime conditions, in which case it's incumbent on *them*
    to avoid collisions.

    I'm not saying that losing your GPS-based navigation is trivial, but any ocean-going vessel and its crew should already be equipped to at least have
    a reasonable chance of avoiding a navigation-related catastrophe.

    ------------------------------

    Date: Mon, 14 Jan 2019 11:11:11 -0800
    From: RISKS-request@csl.sri.com
    Subject: Abridged info on RISKS (comp.risks)

    The ACM RISKS Forum is a MODERATED digest. Its Usenet manifestation is
    comp.risks, the feed for which is donated by panix.com as of June 2011.
    SUBSCRIPTIONS: The mailman Web interface can be used directly to
    subscribe and unsubscribe:
    http://mls.csl.sri.com/mailman/listinfo/risks

    SUBMISSIONS: to risks@CSL.sri.com with meaningful SUBJECT: line that
    includes the string `notsp'. Otherwise your message may not be read.
    *** This attention-string has never changed, but might if spammers use it.
    SPAM challenge-responses will not be honored. Instead, use an alternative
    address from which you never send mail where the address becomes public!
    The complete INFO file (submissions, default disclaimers, archive sites,
    copyright policy, etc.) is online.
    <http://www.CSL.sri.com/risksinfo.html>
    *** Contributors are assumed to have read the full info file for guidelines!

    OFFICIAL ARCHIVES: http://www.risks.org takes you to Lindsay Marshall's
    searchable html archive at newcastle:
    http://catless.ncl.ac.uk/Risks/VL.IS --> VoLume, ISsue.
    Also, ftp://ftp.sri.com/risks for the current volume
    or ftp://ftp.sri.com/VL/risks-VL.IS for previous VoLume
    If none of those work for you, the most recent issue is always at
    http://www.csl.sri.com/users/risko/risks.txt, and index at /risks-31.00
    Lindsay has also added to the Newcastle catless site a palmtop version
    of the most recent RISKS issue and a WAP version that works for many but
    not all telephones: http://catless.ncl.ac.uk/w/r
    ALTERNATIVE ARCHIVES: http://seclists.org/risks/ (only since mid-2001)
    *** NOTE: If a cited URL fails, we do not try to update them. Try
    browsing on the keywords in the subject line or cited article leads.
    Apologies for what Office365 and SafeLinks may have done to URLs.
    Special Offer to Join ACM for readers of the ACM RISKS Forum:
    <http://www.acm.org/joinacm1>

    ------------------------------

    End of RISKS-FORUM Digest 31.60
    ************************

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)