RISKS-LIST: Risks-Forum Digest Saturday 13 May 2023 Volume 33 : Issue 70

ACM FORUM ON RISKS TO THE PUBLIC IN COMPUTERS AND RELATED SYSTEMS (comp.risks)
Peter G. Neumann, founder and still moderator

***** See last item for further information, disclaimers, caveats, etc. *****
This issue is archived at <http://www.risks.org> as
<http://catless.ncl.ac.uk/Risks/33.70>
The current issue can also be found at
<http://www.csl.sri.com/users/risko/risks.txt>

Contents: Still backlogged. This is mostly newer stuff
Microsoft Bets That Fusion Power Is Closer Than Many Think (WSJ)
Tourists follow GPS, drive car into Hawaii harbor (WashPost)
Near collision embarrasses Navy, so they order public San Diego webcams
taken down (Fox5)
A Tennessee company is refusing a U.S. request to recall 67 million
air-bag inflators (npr.org)
Automakers are starting to admit that drivers hate touch screens. Buttons
are back! (Slate)
The federal government is not doing their job, NTSB chair says about
automated driving tech (cnn.co)
MASSIVE Toyota vehicles location data breach (BleepingComputer)
Critical-rated security flaw in Illumina DNA sequencing tech exposes patient
data (techcrunch.com)
Ohio Man Sentenced for Stealing Over 712 Bitcoin Subjected to Forfeiture
(USAO-DC Department of Justice)
Major e-problems in Dallas courts (Reuters)
Navy doctors and dentists are told they owe 3 more years of service after
military admits to another record-keeping error (NBC News)
The Untold Story of the Boldest Supply-Chain Hack Ever (WiReD)
Major psychologists' group warns of social media's potential harm to kids
(NPR)
Three Companies Supplied Fake Comments to FCC (NY AG)
Chinese hackers outnumber FBI cyber staff 50 to 1, bureau director says
(cnbc.com)
What Exactly Are the Dangers Posed by AI? (NYTimes)
Doctors warn about AI's "existential threat to humanity (Axios)
ChatGPT Will See You Now: Doctors Using AI to Answer Patient Questions (WSJ)
Re: ChatGPT Will See You Now: Doctors Using AI to Answer Patient Questions
(Tom Van Vleck)
Re: ChatGPT detector tools resulting in false accusations of students for
cheating (Amos Shapir)
Italy reinstates an `improved' ChatGPT (PGN)
Wendy's Turns to AI-Powered Chatbots for Drive-Thru Orders (Bloomberg)
Re: AI is now indistinguishable from reality (Steve Bacher)
Dominion tells its Fox story: Axios exclusive interview (PGN)
Re: Security breaches covered up by 30% of companies, reveals study
Jose Maria Mateos)
Re: Farmers crippled by satellite failure as GPS-guided tractors
grind to a halt (John Levine, Brian Inglis)
Re: Farmers crippled by satellite failure as GPS-guided tractors
Re: GPS clock turnover -- again and again (Terje Mathisen, Brian Inglis)
Software Obsolescence (Ross Anderson)
Stop Ransomware (CISA)
Correctness-by-Construction - How Can We Build Better Software? (PGN)
Abridged info on RISKS (comp.risks)

----------------------------------------------------------------------

Date: Wed, 10 May 2023 15:48:30 -0700
From: Victor Miller <victorsmiller@gmail.com>
Subject: Microsoft Bets That Fusion Power Is Closer Than Many Think (WSJ)

https://www.wsj.com/articles/microsoft-bets-that-fusion-power-is-closer-tha=
n-many-think-cb1b09dc

I'd bet against it.
[It certainly adds to the CON-FUSION. PGN]

[Monty Solomon had another related item:
Microsoft just made a huge, far-from-certain bet on nuclear fusion
Scientists have been dreaming about nuclear fusion for
decades. Microsoft thinks the technology is nearly ready to plug into
the grid.
https://www.theverge.com/2023/5/10/23717332/microsoft-nuclear-fusion-power-plant-helion-purchase-agreement
PGN]

------------------------------

Date: Sat, 13 May 2023 14:06:59 -0600
From: Jim Reisert AD1C <jjreisert@alum.mit.edu>
Subject: Tourists follow GPS, drive car into Hawaii harbor (WashPost)

Natalie B. Compton, *The Washington Post*, 2 May 2023

Witnesses said two tourists took a wrong turn on April 29 and followed
their GPS straight into Honokohau Harbor in Kailua-Kona, Hawaii.

https://www.washingtonpost.com/travel/2023/05/02/hawaii-tourists-car-sink-harbor/

------------------------------

Date: Sat, 13 May 2023 13:38:49 -0700
From: Lauren Weinstein <lauren@vortex.com>
Subject: Near collision embarrasses Navy, so they order public San Diego
webcams taken down (Fox5)

https://fox5sandiego.com/news/local-news/man-who-caught-2-navy-ships-nearly-colliding-ordered-to-take-cameras-down/

------------------------------

Date: Sat, 13 May 2023 06:21:12 +0000
From: Richard Marlon Stein <rmstein@protonmail.com>
Subject: A Tennessee company is refusing a U.S. request to recall 67 million
air-bag inflators (npr.org)

https://www.npr.org/2023/05/12/1175984778/tennessee-company-refuses-recall-air-bags

Reminiscent of the Takada air-bag inflator debacle affecting ~67 million
vehicles in 2014. Takada dug in their corporate heals, refused to initiate a
mandatory recall until Toyota bailed out of the keretsu.

GM being proactive about recall demonstrates responsive corporate
governance.

------------------------------

Date: Sat, 29 Apr 2023 08:14:29 -0700
From: Steve Bacher <sebmb1@verizon.net>
Subject: Automakers are starting to admit that drivers hate touch screens.
Buttons are back! (Slate)

And now for something completely different:  some good RISKS news.

https://slate.com/business/2023/04/cars-buttons-touch-screens-vw-porsche-nissan-hyundai.html

Happily, there is one area where we are making at least marginal progress: A
growing number of automakers are backpedaling away from the huge, complex
touch screens that have infested dashboard design over the past 15
years. Buttons and knobs are coming back.

------------------------------

Date: Sat, 06 May 2023 13:01:47 +0000
From: Richard Marlon Stein <rmstein@protonmail.com>
Subject: The federal government is not doing their job, NTSB chair says
about automated driving tech (cnn.co)

https://us.cnn.com/2023/05/06/business/ntsb-automatic-driving-safety/index.html

he NTSB has called on regulators to set performance minimums for these
features, to test vehicles rigorously against those standards and provide
the results to consumers. But we're still waiting.

Regulations -- performance standards -- are "set" by regulators via
negotiations with industry.

When driverless vehicle manufacturers negotiate, they will advocate for
'achievable' standards which often yield the lowest manufacturing expense
with least consumer risk reduction effectiveness. Nevermind explainability
for DV actions -- that's too hard to achieve in practice.

------------------------------

Date: Sat, 13 May 2023 11:26:57 -0700
From: Lauren Weinstein <lauren@vortex.com>
Subject: MASSIVE Toyota vehicles location data breach (BleepingComputer)

Toyota: Car location data of 2 million customers exposed for ten years

https://www.bleepingcomputer.com/news/security/toyota-car-location-data-of-2-million-customers-exposed-for-ten-years/

------------------------------

Date: Mon, 01 May 2023 11:57:40 +0000
From: Richard Marlon Stein <rmstein@protonmail.com>
Subject: Critical-rated security flaw in Illumina DNA sequencing
tech exposes patient data (techcrunch.com)

https://techcrunch.com/2023/04/28/illumina-dna-tech-fda-security-flaw/

In separate advisories released on Thursday, U.S. cybersecurity agency CISA
and the U.S. Food and Drug Administration warned that the security flaw --
tracked as CVE-2023-1968 with the maximum vulnerability severity rating of
10 out of 10 -- allows hackers to remotely access an affected device over
the internet without needing a password. If exploited, the bug could allow
hackers to compromise devices to produce incorrect or altered results, or
none at all.

[Genetically modified plants will never taste the same.]

------------------------------

Date: Mon, 1 May 2023 00:07:34 -0400
From: Gabe Goldberg <gabe@gabegold.com>
Subject: Ohio Man Sentenced for Stealing Over 712 Bitcoin Subjected to
Forfeiture (USAO-DC Department of Justice)

https://www.justice.gov/usao-dc/pr/ohio-man-sentenced-stealing-over-712-bitcoin-subjected-forfeiture

Hackers are breaking into AT&T email accounts to steal cryptocurrency. AT&T
says cybercriminals exploited an API issue to take control of victims' email
addresses

https://techcrunch.com/2023/04/26/hackers-are-breaking-into-att-email-accounts-to-steal-cryptocurrency/

Makes mattress banking appealing. [Is your house even more secure? PGN]

------------------------------

Date: Fri, 5 May 2023 00:09:46 +0000
From: danny burstein <dannyb@panix.com>
Subject: Major e-problems in Dallas courts (Reuters)

https://www.reuters.com/world/us/dallas-disrupted-by-hackers-courts-closed-police-fire-sites-offline-2023-05-04/

------------------------------

Date: Sat, 6 May 2023 09:05:46 -0400
From: Monty Solomon <monty@roscom.com>
Subject: Navy doctors and dentists are told they owe 3 more years of service
after military admits to another record-keeping error (NBC News)

https://www.nbcnews.com/news/us-news/navy-doctors-dentists-are-told-owe-3-years-service-military-admits-ano-rcna82508