Friday, June 17, 2022

MARICOPA COUNTY: An Ozone High Pollution Advisory has been issued for Thursday, June 16

Ozone: Ground level ozone is formed by a chemical reaction that needs heat from sunlight, nitrogen oxides and VOCs to form. The months of April through September make up our Valley’s longer-than-normal "ozone season."

"High Pollution Advisory" or "HPA" means the highest concentration of pollution may exceed the federal health standard. Active children, adults and people with lung disease such as asthma should reduce prolonged or heavy outdoor exertion. Maricopa County employers enlisted in the Travel Reduction Program are asked to activate their HPA plans on high pollution advisory days.

The Arizona Department of Environmental Quality has issued an Ozone High Pollution Advisory for Thursday, June 16

 

 - https://files.airnowtech.org/airnow/today/cur_aqi_phoenix_az.jpg

Risk Scale

Clean Air Flag ProgramIn an effort to raise Maricopa County and metropolitan Phoenix air quality awareness and encourage behavior modification based on air quality conditions, Maricopa County Air Quality Department has initiated an Air Quality Awareness “Flag” Program to increase public and business community recognition of the Air Quality Index rating system. The intent is to highlight the need to take responsible measures to control air pollution during periods when Metropolitan Phoenix air quality is degraded.

 

 

 

 

ASSANGE EXTRADITION TO STAND TRIAL IN AMERICA..."Land-of-The-Free" and "Home-of-The-Brave"

Intro: The saga was triggered in 2010 when WikiLeaks published a series of leaks by Chelsea Manning, a former US army soldier, as well as a dump of more than 250,000 US diplomatic cables, some of which were published in the Guardian and elsewhere, containing classified diplomatic analysis from world leaders. The US government launched a criminal investigation into the leaks. . .
“US authorities are determined to silence him because they don’t like what he revealed.”
. . .On 17 June, following consideration by both the magistrates court and high court, the extradition of Mr Julian Assange to the US was ordered. Mr Assange retains the normal 14-day right to appeal.

Julian Assange’s extradition from UK to US approved by home secretary

<div class=__reading__mode__extracted__imagecaption>Supporters of Julian Assange demonstrating outside the Home Office on 17 May calling on Priti Patel to refuse the US extradition order. Photograph: Anadolu Agency/Getty Images<br>Supporters of Julian Assange demonstrating outside the Home Office on 17 May calling on Priti Patel to refuse the US extradition order. Photograph: Anadolu Agency/Getty Images</div>

Appeal likely after Priti Patel gives green light to extradition of WikiLeaks co-founder

"Priti Patel has approved the extradition of the WikiLeaks co-founder Julian Assange to the US, a decision the organisation immediately said it would appeal against in the high court.

The case passed to the home secretary last month after the supreme court ruled there were no legal questions over assurances given by US authorities over how Assange was likely to be treated.

While Patel has given a green light, WikiLeaks immediately released a statement to say it would appeal against the decision. . ."

Continue reading >> https://www.theguardian.com/media/2022/jun/17/julian-assange-extradition-to-us-approved-by-priti-patel 

Here are extracts from a report in Forbes

Julian Assange’s Extradition To The U.S. Approved By U.K. Government

U.K. Home Secretary Priti Patel on Friday approved the extradition of Wikileaks founder Julian Assange to the U.S.—where he faces multiple criminal charges and possible life imprisonment—in a decision that is likely to draw opposition from human rights and press freedom activists around the world.

In a statement released on Twitter, Wikileaks said: “This is a dark day for Press freedom and for British democracy. Anyone in this country who cares about freedom of expression should be deeply ashamed that the Home Secretary has approved the extradition of Julian Assange to the United States, the country that plotted his assassination. Julian did nothing wrong... he is being punished for doing his job.”

The 50-year-old Wikileaks founder faces multiple criminal charges in the U.S. . .

Chief Critic

In a statement released on Twitter, Wikileaks said: “This is a dark day for Press freedom and for British democracy. Anyone in this country who cares about freedom of expression should be deeply ashamed that the Home Secretary has approved the extradition of Julian Assange to the United States, the country that plotted his assassination. Julian did nothing wrong... he is being punished for doing his job.”

Key Background

The 50-year-old Wikileaks founder faces multiple criminal charges in the U.S. linked to his website’s release of confidential U.S. military documents and diplomatic cables. U.S. authorities also allege that Assange breached espionage laws by helping former U.S. Army intelligence analyst Chelsea Manning crack a U.S. Department of Defense computer. If found guilty, Assange could face up to 175 years in prison. Assange has denied allegations that he worked with Manning and has claimed the allegations against him are politically motivated due to Wikileaks' disclosure of war crimes and human rights abuses by the U.S. government.

Further Reading

Julian Assange can be extradited, says UK home secretary (BBC News)

Julian Assange: Government approves extradition of WikiLeaks founder to the US (Sky News)

UKRAINE PERFORMATIVE PRESIDENT ZEKENSKIY NOW APPEARING AS 'STAR WARS' 3-D HOLOGRAM APPARITION

Intro: The former comedian and sitcom-star of 'Servant of The People', owner of his own media empire worth $20-$30 Millions of dollars, appeared as a larger-than-life augmented apparition at a Viva Technology conference in Paris.
“It’s an experiment and a digital revolution, and the modernisation of the current system all at the same time.” . .a unique chance to rebuild Ukraine as a fully digital democracy.
“No other country in the world will offer you such a chance to use the most advanced technologies at a state level,” he said.
He said the government would lay out the specifics of a plan that would create a digital government at a conference in Switzerland in the coming weeks.

Hologram Zelenskiy promises Ukraine will defeat ‘the empire’

Ukrainian president attends Paris trade show as electronic apparition, urging tech companies to aid ‘digital revolution’ on lend-lease terms

Volodymyr Zelensky delivers a speech in a 3D hologram projection at the Viva Technology conference in Paris.

( Volodymyr Zelenskiy delivers a speech in a 3D hologram projection at the Viva Technology conference in Paris. Photograph: Benoît Tessier/Reuters)
 
Thu 16 Jun 2022 19.53 EDT Staff and with Agence France-Presse
the Guardian                         

"Volodymyr Zelenskiy referenced Star Wars and the second world war as the Ukrainian president appeared as a hologram at a conference in Paris to seek aid from big tech firms.

He told a crowd of hundreds at the VivaTech trade show that he was offering technology firms a unique chance to rebuild Ukraine as a fully digital democracy.

He asked for help on the terms of lend-lease – the way in which the United States helped the Allies during the second world war, offering aid without payment but on the understanding that hardware would be returned.

“It’s unusual for presidents or heads of government to use a hologram to address people but this is not the only aspect of Star Wars that we are putting into practice,” he said.

“We will defeat the empire too,” he said, likening Russian forces to the enemy in Star Wars. . ."

Read more >> https://www.theguardian.com/technology/2022/jun/17/hologram-zelenskiy-promises-ukraine-will-defeat-the-empire

Thursday, June 16, 2022

JUNK TRAFFIC TSUNAMI

/ The Cloudflare product manager said that his company automatically detected and mitigated the attack against the customer, which was using Cloudflare's free service. In some cases, DDoSers combine their use of cloud-based devices with other techniques to make their attacks more potent. In the 15.3 million-HTTPS-requests-per-second DDoS from earlier this year, for example, Cloudflare uncovered evidence that the threat actors may have exploited a critical vulnerability. This exploit allowed them to bypass authentication in a wide range of Java-based applications used inside the cloud environments running their attack devices.

Tsunami of junk traffic that broke DDoS records delivered by tiniest of botnets

The DDoS arms race shows no signs of slowing down.

<div class=__reading__mode__extracted__imagecaption>EnlargeAurich Lawson | Getty Images

"A massive flood of malicious traffic that recently set a new distributed denial-of-service record came from an unlikely source. A botnet of just 5,000 devices was responsible, as extortionists and vandals continue to develop ever more powerful attacks to knock sites offline, security researchers said.

The DDoS delivered 26 million HTTPS requests per second, breaking the previous record of 15.3 million requests for that protocol set only seven weeks ago, Cloudflare Product Manager ​​Omer Yoachimik reported.

Unlike more common DDoS payloads such as HTTP, SYN, or SYN-ACK packets, malicious HTTPS requests require considerably more computing resources for the attacker to deliver and for the defender or victim to absorb.

4,000 times stronger

"We've seen very large attacks in the past over (unencrypted) HTTP, but this attack stands out because of the resources it required at its scale," Yoachimik wrote.

EnlargeCloudflare

The burst lasted less than 30 seconds and generated more than 212 million HTTPS requests from more than 1,500 networks in 121 countries, with Indonesia, the United States, Brazil, and Russia topping the list. The top networks used included French-based OVH (Autonomous System Number 16276), the Indonesian Telkomnet (ASN 7713), the US-based iboss (ASN 137922), and the Libyan Ajeel (ASN 37284). About 3 percent of the attack came through Tor nodes.

EnlargeCloudflare
EnlargeCloudflare

As was the case with the previous 15.3 million-HTTPS-requests-per-second attack, the new one originated mainly on devices from cloud service providers. The servers and virtual machines available from these providers are considerably more powerful than compromised computers and IoT devices connected to residential ISPs, which are the more common source of DDoSes.

[   ] DDoS attacks can be measured in several ways, including by the volume of data, the number of packets, or the number of requests sent each second. The other current records are 3.4 terabits per second for volumetric DDoSes—which attempt to consume all bandwidth available to the target—and 809 million packets per second. The 26 million HTTPS requests per second break the previous 17.2 million-requests-per-second record set in 2020. Not only did that earlier attack deliver fewer packets than the new record, but it also relied on HTTP, which isn't as potent as HTTPS. . .'

Reference: https://arstechnica.com/information-technology/2022/06/tsunami-of-junk-traffic-that-broke-ddos-records-delivered-by-tiniest-of-botnets/

RELATED FOR FURTHER READING

One of the most powerful DDoSes ever targets cryptocurrency platform

15.3 million requests per second is HUGE, especially when delivered through HTTPS.

<div class=__reading__mode__extracted__imagecaption>Enlarge

A cryptocurrency platform was recently on the receiving end of one of the biggest distributed denial-of-service attacks ever after threat actors bombarded it with 15.3 million requests, content delivery network Cloudflare said.

https://arstechnica.com/information-technology/2022/04/one-of-the-most-powerful-ddoses-ever-targets-cryptocurrency-platform/

 

HOSPITALS SHARING YOUR PERSONAL HEALTH INFORMATION DATA...Creepy, Problematic and Potentially Illegal

Facebook is receiving sensitive medical information from hospital websites

Ad-tracking by some hospitals may violate federal law protecting health data.

<div class=__reading__mode__extracted__imagecaption>EnlargeAurich Lawson | Getty Images

A tracking tool installed on many hospitals’ websites has been collecting patients’ sensitive health information—including details about their medical conditions, prescriptions, and doctor’s appointments—and sending it to Facebook.

The Markup tested the websites of Newsweek’s top 100 hospitals in America. On 33 of them we found the tracker, called the Meta Pixel, sending Facebook a packet of data whenever a person clicked a button to schedule a doctor’s appointment. The data is connected to an IP address—an identifier that’s like a computer’s mailing address and can generally be linked to a specific individual or household—creating an intimate receipt of the appointment request for Facebook.

The Markup

On the website of University Hospitals Cleveland Medical Center, for example, clicking the “Schedule Online” button on a doctor’s page prompted the Meta Pixel to send Facebook the text of the button, the doctor’s name, and the search term we used to find her: “pregnancy termination.”

> Clicking the “Schedule Online Now” button for a doctor on the website of Froedtert Hospital, in Wisconsin, prompted the Meta Pixel to send Facebook the text of the button, the doctor’s name, and the condition we selected from a dropdown menu: “Alzheimer’s.”

The Markup also found the Meta Pixel installed inside the password-protected patient portals of seven health systems. On five of those systems’ pages, we documented the pixel sending Facebook data about real patients who volunteered to participate in the Pixel Hunt project, a collaboration between The Markup and Mozilla Rally. The project is a crowd-sourced undertaking in which anyone can install Mozilla’s Rally browser add-on in order to send The Markup data on the Meta Pixel as it appears on sites that they visit. The data sent to hospitals included the names of patients’ medications, descriptions of their allergic reactions, and details about their upcoming doctor’s appointments.

Former regulators, health data security experts, and privacy advocates who reviewed The Markup’s findings said the hospitals in question may have violated the federal Health Insurance Portability and Accountability Act (HIPAA). The law prohibits covered entities like hospitals from sharing personally identifiable health information with third parties like Facebook, except when an individual has expressly consented in advance or under certain contracts.

Neither the hospitals nor Meta said they had such contracts in place, and The Markup found no evidence that the hospitals or Meta were otherwise obtaining patients’ express consent.

“I am deeply troubled by what [the hospitals] are doing with the capture of their data and the sharing of it,” said David Holtzman, a health privacy consultant who previously served as a senior privacy adviser in the U.S. Department of Health and Human Services’ Office for Civil Rights, which enforces HIPAA. “I cannot say [sharing this data] is for certain a HIPAA violation. It is quite likely a HIPAA violation.”

University Hospitals Cleveland Medical Center spokesperson George Stamatis did not respond to The Markup’s questions but said in a brief statement that the hospital “comport[s] with all applicable federal and state laws and regulatory requirements.”

After reviewing The Markup’s findings, Froedtert Hospital removed the Meta Pixel from its website “out of an abundance of caution,” Steve Schooff, a spokesperson for the hospital, wrote in a statement.

As of June 15, six other hospitals had also removed pixels from their appointment booking pages and at least five of the seven health systems that had Meta Pixels installed in their patient portals had removed those pixels.

The 33 hospitals The Markup found sending patient appointment details to Facebook collectively reported more than 26 million patient admissions and outpatient visits in 2020, according to the most recent data available from the American Hospital Association.

Our investigation was limited to just over 100 hospitals; the data sharing likely affects many more patients and institutions than we identified.

Facebook itself is not subject to HIPAA, but the experts interviewed for this story expressed concerns about how the advertising giant might use the personal health data it’s collecting for its own profit.

“This is an extreme example of exactly how far the tentacles of Big Tech reach into what we think of as a protected data space,” said Nicholson Price, a University of Michigan law professor who studies big data and health care. “I think this is creepy, problematic, and potentially illegal” from the hospitals’ point of view.

The Markup was unable to determine whether Facebook used the data to target advertisements, train its recommendation algorithms, or profit in other ways."

GAO REPORT ON AMERICAN-SUPPLIED WEAPONS FOR YEMEN WAR INCONCLUSIVE...$54 Billion$$$$$$$$$

Press Reports: The report’s examination of nearly $60bn in US weapons sales to the Saudi-led coalition – from a period spanning 2015 to 2021 – is the second time a watchdog has attempted to investigate the US’s own culpability in contributing to violation of humanitarian laws in the Yemen conflict. In August 2020, a state department inspector general found that the department was failing to take measures to reduce civilian deaths. 

Yemen: State and DOD Need Better Information on Civilian Impacts of U.S. Military Support to Saudi Arabia and the United Arab Emirates

GAO-22-105988 Published: Jun 15, 2022. Publicly Released: Jun 15, 2022

map with Yemen highlighted

According to the U.N., the conflict in Yemen is one of the world's worst humanitarian crises. The U.S. has long-standing security relationships with Saudi Arabia and the UAE—2 primary actors in the conflict—and has sold them weapons. . .

What GAO Found

The Department of Defense (DOD) administered at least $54.6 billion of military support to Saudi Arabia and the United Arab Emirates (UAE) from fiscal years 2015 through 2021. The vast majority of this support was defense articles and defense services, . .Examples of Defense Articles That May Be Purchased through Foreign Military Sales: Helicopters, Missiles, and Small Diameter Bombs. . .

DOD submitted its report regarding U.S. and coalition partners' operations in Yemen on time and fully addressed all required elements that we reviewed, but State has not submitted all required certifications on Saudi Arabia's and UAE's actions in Yemen. . .

This is a public version of a sensitive report that GAO issued in April 2022. Information that DOD and State deemed sensitive has been omitted."

Fast Facts

According to the U.N., the conflict in Yemen is one of the world's worst humanitarian crises. The U.S. has long-standing security relationships with Saudi Arabia and the UAE—2 primary actors in the conflict—and has sold them weapons.

There have been reports of extensive civilian harm in Yemen. However, DOD has not reported and State could not provide evidence that it investigated incidents of potential unauthorized use of equipment transferred to Saudi Arabia or UAE.

State and DOD could use specific guidance for determining whether this equipment was used for unauthorized purposes. Our recommendations address this issue and more.

https://www.gao.gov/products/gao-22-105988

 

Saudi F-15C Eagles fly above Saudi Arabia in 2019. Attacks in Yemen by combat jets from a Saudi-led coalition are blamed for nearly 9,000 civilian deaths, according to a report by the Armed Conflict Location and Event Data Project. (Christopher Ruano/U.S. Air Force)

The troubling findings come days after the White House confirmed that Biden will visit Riyadh next month, in what is widely seen as an effort to persuade the kingdom to increase oil output and ease price pressure for consumers. . .

[.    ] A foreign nation killing civilians while using U.S. weapons would not necessarily count as “misuse,” as the term is not defined in official policy, U.S. military and State Department officials told GAO investigators.

The government report validates fears that U.S.-made weapons are being used to commit war crimes in Yemen, the New York-based nonprofit group Human Rights Watch said Monday. It called for a suspension of sales to Saudi Arabia and the UAE.

A 2020 State Department Inspector General report also found shortcomings in U.S. government transparency regarding the war in Yemen.

The release of this week’s report comes in advance of a planned Middle East trip in mid-July by President Joe Biden. The visit will include a stop in Saudi Arabia.

Human rights advocates who have supported Biden’s decision – so far – to try to personally alienate Saudi’s de facto leader, Mohammed bin Salman, have called the visit a “betrayal” of Biden campaign promise to turn Saudi into a pariah.

US has not fully investigated own role in Yemen rights abuses, watchdog finds

". . A report by the Government Accountability Office, which examined US weapons sales to the Saudi-led coalition in Yemen, also raised serious doubts about one of Joe Biden’s first foreign policy as president, when he announced that his administration was ending US support for Saudi offensive operations in Yemen.

At the time, in February 2021, the move was seen as an attempt to show the world that the US would no longer be an unquestioning ally to its allies in the Gulf.

[    ] The UN has called the Saudi-led war in Yemen one of the world’s worst humanitarian crises, affecting an estimated 21 million people.

The GAO reported that the US DoD had made some efforts to train Saudi officials to mitigate civilian casualties and adhere to international humanitarian law. But the DoD has never “fully measured” the extent to which its advising and training has helped to facilitate “civilian harm reduction” in Yemen.

The GAO also said that it had been told by the state department that officials there could not locate three so-called “country team” assessments to the UAE, which would have included critical information and how the US has evaluated weapons sales requests. The report said that, according to DoD policy, the assessments must also include the “potential for misuse of the defense articles in question” and what “additional training or support, if any, is necessary to reduce the risk that the recipient will inadvertently cause civilian harm during operations”.

GAO requested the assessments in September and were told this month that they have been located and would be provided to GAO once clearance was obtained."

18 hours ago · “However, despite several reports that airstrikes and other attacks by Saudi Arabia and UAE have caused extensive civilian harm in Yemen, DOD ...

 

US didn’t track whether weapons sold to Saudis caused civilian deaths in Yemen, GAO finds

<div class=__reading__mode__extracted__imagecaption>
            The Saudi and U.S. flags fly in Saudi Arabia in 2016. The U.S. was lax in its oversight of more than $54 billion in military aid to Saudi Arabia and the United Arab Emirates for the war in Yemen, according to a report released Wednesday by the Government Accountability Office. (Jim Greenhill/U.S. Army)

The U.S. doesn’t know whether $54 billion in military arms sales to allies Saudi Arabia and the United Arab Emirates contributed to the killing of civilians in Yemen, a government watchdog agency found.

State Departmentofficials “could not provide evidence that they conducted any investigations to determine if or how U.S.-origin equipment was misused, and could not provide specific guidance for doing so,” according to a Government Accountability Office report released Wednesday.

The report analyzed military aid the U.S. sent from the start of the civil war in Yemen in 2015 through 2021, the last year tracked. . .

U.S. Fails to Assess Civilian Deaths in Yemen War, Internal Report Says

A Saudi-led coalition has killed civilians with U.S. weapons, but the State Department and the Pentagon have fallen short on tracking the deaths, U.S. investigators found.

<div class=__reading__mode__extracted__imagecaption>A Saudi-led airstrike hit a prison in Yemen in January and killed at least 70 people, according to Houthi officials and international aid groups.Credit...EPA, via Shutterstock

WASHINGTON — The State Department and the Defense Department have failed to assess civilian casualties caused by a Saudi-led coalition in the catastrophic war in Yemen and the use of American-made weapons in the killings, according to an internal government report.

The report from the Government Accountability Office focuses on attacks in recent years by a Saudi-led coalition that is fighting Houthi rebels for control of Yemen. The alliance, which includes the United Arab Emirates, has carried out deadly strikes using combat jets and munitions that have been supplied and maintained largely by American companies with the approval of the State Department and the Pentagon.

The report spans the Obama, Trump and Biden administrations, covering the period from 2015, when the war against the Houthis began, to 2021. It is the second major report by a U.S. agency that lays out government shortcomings in preventing civilian casualties in Yemen. In August 2020, the State Department inspector general issued a report that said the department had failed to take proper measures to reduce civilian deaths. . ."

 

 

 

 

2000 SOCIAL ENGINEERS ARRESTED: Code Name 'First Light 2022'

Social engineering is a generic term describing the manipulation of victims by threat actors, typically through human interaction, to trick them into performing some act or disclosing sensitive information
Operation “First Light 2022”, running for two months from March 8 2002 until May 8 2022, saw 76 countries clamp down on organised crime rings behind a variety of scams, seizing criminal assets, and providing new investigative leads around the world.
2 hours ago
The Federal Trade Commission says that people in the US have lost $547 million to romance scams in 2021 and the FBI reports that BEC scams have led to almost $2.4 billion in reported losses.

Interpol seizes $50 million, arrests 2000 social engineers

"An international law enforcement operation, codenamed 'First Light 2022,' has seized 50 million dollars and arrested thousands of people involved in social engineering scams worldwide.

The operation was led by Interpol with the assistance of police in 76 countries and focused on social engineering crimes involving telephone deception, romance scams, business email compromise (BEC) scams, and related money laundering. . .

Typically, the threat actors develop a convincing, realistic hook and then contact that person via phone or email to manipulate them.

Social engineering actors usually present an excuse to request a payment, but they may also use the stolen information to sell it to other crooks, gain access to networks/systems, perform blackmail, and more. 

The FTC says that people in the US have lost $547 million to romance scams in 2021 and the FBI reports that BEC scams have led to almost $2.4 billion in reported losses.

Operation First Light 2022

Interpol’s First Light 2022 operation targeted romance scams, email deception, scamming frauds, and telephone deception, all closely linked to financial crimes.

The results of the operation, which lasted two months, between March and May 2022, are the following:

  • 1,770 locations raided worldwide
  • Some 3,000 suspects identified
  • Some 2,000 operators, fraudsters, and money launderers arrested
  • Some 4,000 bank accounts frozen
  • Some USD 50 million worth of illicit funds intercepted

Highlighted cases presented by Interpol include a Chinese national who had defrauded 24,000 victims out of $35,700,000 and a fake kidnap case that demanded a payment of $1,575,000 from the victim’s parents.

(Hong-Kong police arresting a scammer following a raid in telephone center(Interpol)

Another point that Interpol highlights are Ponzi-like job scams posing as e-commerce affiliations and e-shop business opportunities that appear to be on the rise.

“As part of Operation First Light 2022, the Singapore Police Force arrested eight suspects linked to Ponzi-like job scams. Scammers would offer high-paying online marketing jobs via social media and messaging systems where victims would initially make small earnings, and subsequently, be required to recruit more members to earn commissions.” - Interpol.

One more 2022 trend identified by Interpol’s analysts is the impersonation of the agency’s officials, threatening random people to pay the fake agents money to stop an investigation against them.

While there is massive financial loss related to these scams, there are also life-threatening consequences to social engineering crimes.

Interpol says there is a notable rise in human trafficking on social media platforms, where people are lured with lucrative job offers that lead to forced labor, sexual slavery, or captivity in casinos or fishing vessels."

Related Articles:

InQuest Labs: Man + Machine vs Business Email Compromise (BEC)

Americans report losing over $1 billion to cryptocurrency scams

FBI warns of Ukrainian charities impersonated to steal donations

Three Nigerians arrested for malware-assisted financial crimes

Interpol arrests alleged leader of the SilverTerrier BEC gang