RISKS-LIST: Risks-Forum Digest yyday zz March 2024 Volume 34 : Issue 10

ACM FORUM ON RISKS TO THE PUBLIC IN COMPUTERS AND RELATED SYSTEMS (comp.risks)
Peter G. Neumann, founder and still moderator

***** See last item for further information, disclaimers, caveats, etc. *****
This issue is archived at <http://www.risks.org> as
<http://catless.ncl.ac.uk/Risks/34.10>
The current issue can also be found at
<http://www.csl.sri.com/users/risko/risks.txt>

Contents:
SFO-bound flight returns to Australia (Jordan Parker PGN-ed)
Latam flight event (Jim Geissman)
Boeing tells pilots to check seats after Latam plane (BBC)
Alaska Airlines Flight Was Scheduled for Safety Check on Day
Panel Blew Off (NYTimes)
Hackers Breached Key Microsoft Systems (Sean Lyngaas)
Microsoft AI engineer warns FTC about Copilot Designer safety
Cut submarine cables cause web outages across Africa; 6 countries
still affected (ArsTechnica)
McDonald's hit by outages at stores worldwide (BBC)
McDonald's blames global outage on third party (BBC)
Phony Billionaires on Facebook Are Scamming Americans Out of
Their Life Savings (WashPost)
Amid explosive demand, America is running out of power (WashPost)
CISA hacked (Sean Lungaas)
Even a security expert can get phished (Pluralistic)
Microsoft says Kremlin-backed hackers accessed its source
and internal systems (ArsTechnica)
Spate of Mock News Sites With Russian Ties Pop Up in U.S (NYTimes)
companies (NYTimes)
Autos are spying on drivers, feeding the info to insurance
Aescape's Robot-Arm-Powered Massage Table (WiReD)
ATT outage under FCC investigation (WashPost)
The AI-generated hell of the 2024 election (The Verge)
New Hampshire voters sue Biden deepfake robocall creators (NBCNews)
Google Restricts Gemini Chatbot Election Answers (Peter Hoskins)
Robot Ships Are Setting Sail (BBC)
Your Doctor's Office Might Be Bugged (Jesse Pines)
AI Is Being Built on Dated, Flawed Motion-Capture Data (Julianne Pepitone)
Researchers Jailbreak Chatbots with ASCII Art (Mark Tyson)
Nvidia sued over AI training data as copyright clashes continue
(ArsTechnica)
Reports of DJI data breach turn out to be false apparently
(Lauren Weinstein)
Pornhub disables website in Texas amid legal battle with
attorney general's office (NBCNews)
Massively Popular Safe Locks Have Secret Backdoor Codes
(Victor Miller)
D-Wave Says Its Quantum Computers Can Solve Otherwise Impossible Tasks
( (Matthew Sparkes)
Re: End-to-End Encryption under attack in Nevada (John Levine)
Re: A Vending Machine Error Revealed Secret Face Recognition Tech
(Steve Bacher)
Re: comp.risks via Panix? (Steve Bacher)
Re: More than 2 Million Research Papers Have Disappeared
from the Internet (Martin Ward)
Re: Risks of Leap Years and Dumb Digital Watches (Amos Shapir)
Re: Risks of hype, 'Keytrap' DNS bug threatens widespread (John Levine)
Abridged info on RISKS (comp.risks)

----------------------------------------------------------------------

Date: Fri, 15 Mar 2024 11:14:04 PDT
From: Peter Neumann <neumann@csl.sri.com>
Subject: SFO-bound flight returns to Australia (Jordan Parker)

Jordan Parker, *The San Franciso Chronicle*, 14 Mar 2024 (Pi Day)
[PGN-ed]

* A maintenance issue forced a Boeing 777-300 United Flight 830 with
167 passengers to return to Australia on Monday 11 Mar 2024 in the
seventh incident in a week.

* On Saturday 9 Mar, a United flight from Chicago's O'Hare returned
after a maintenance issue

* On Friday 8 Mar, a United flight from SFO to Mexico City
made an emergency landing in Los Angeles due to a hydraulic
issue.

* Also on 8 Mar, a United plane rolled off the runway and was
stuck in the grass at George Bush International in Houston.

* On Thursday 7 Mar, a United jet bound for Japan lost a wheel
during takeoff.

* On Monday 4 Mar, a United flight from Houston to Florida made
an emergency landing after an engine went up in flames in midair.

* Also on 4 Mar, an SFO-bound United flight from Honolulu landed
safely after an engine failed in mid-flight.

[Jim Geissman notes:
United Airlines flight 433 lands safely without panel in Oregon
The missing panel went undetected during the flight on 15 Mar 2023.
https://www.bbc.com/news/world-us-canada-68584134
PGN]

------------------------------

Date: Mon, 11 Mar 2024 18:38:56 -0700
From: "Jim" <jgeissman@socal.rr.com>
Subject: Latam flight event

Boeing plane drops suddenly injuring several. Crew member quoted as saying
the instruments briefly went black.

https://www.nzherald.co.nz/nz/nz-passenger-on-latam-flight-saw-man-with-bloo
d-streaming-down-his-face/EXGL5PBCD5E2NBIUDFQZ76MYSQ/

------------------------------

Date: Fri, 15 Mar 2024 22:36:34 -0600
From: Matthew Kruk <mkrukg@gmail.com>
Subject: Boeing tells pilots to check seats after Latam plane
incident (BBC)

https://www.bbc.com/news/business-68580950

Boeing has told airlines operating 787 Dreamliners that pilots need to
check their seats as an investigation into an incident on a Latam flight
continues.

It comes after 50 people were hurt this week when a 787 dropped suddenly
during a Latam Airlines flight.

*The Wall Street Journal* reported that a flight attendant accidentally hit a
switch on the pilot's seat, which pushed the pilot into the controls,
forcing down the plane's nose.

------------------------------

Date: Wed, 13 Mar 2024 09:28:02 -0400
From: Monty Solomon <monty@roscom.com>
Subject: Alaska Airlines Flight Was Scheduled for Safety Check on Day
Panel Blew Off (NYTimes)
goThe 737 Max remained in service for a day after the airline’s engineers,
concerned about warning lights, scheduled it to come in for
maintenance. During that period, a door plug came off in flight.

https://www.nytimes.com/2024/03/12/us/politics/alaska-airlines-flight-door.html

------------------------------

Date: Mon, 11 Mar 2024 11:08:00 -0400 (EDT)
From: ACM TechNews <technews-editor@acm.org>
Subject: Hackers Breached Key Microsoft Systems (Sean Lyngaas)

Sean Lyngaas, *CNN*, 8 Mar 2024, via ACM TechNews

Microsoft revealed that a breach of its systems by Russian state-backed
hackers was more extensive than previously thought when first disclosed in
January. Microsoft believes the hackers have used information stolen from
Microsoft's corporate email systems to access "some of the company's source
code repositories and internal systems," the company said in a filing with
the U.S. Securities and Exchange Commission. An accompanying blog post said
the hacker group may be using the information it stole "to accumulate a
picture of areas to attack and enhance its ability to do so."

------------------------------

Date: Fri, 8 Mar 2024 00:40:24 -0500
From: Monty Solomon <monty@roscom.com>
Subject: Microsoft AI engineer warns FTC about Copilot Designer safety
concerns (The Verge)

https://www.theverge.com/2024/3/6/24092191/microsoft-ai-engineer-copilot-designer-ftc-safety-concerns

------------------------------

Date: Sat, 16 Mar 2024 15:33:59 -0400
From: Monty Solomon <monty@roscom.com>
Subject: Cut submarine cables cause web outages across Africa; 6
countries still affected (ArsTechnica)

https://arstechnica.com/?p=2010677

------------------------------

Date: Fri, 15 Mar 2024 06:47:42 -0600
From: Matthew Kruk <mkrukg@gmail.com>
Subject: McDonald's hit by outages at stores worldwide

https://www.cbc.ca/news/business/mcdonalds-outage-1.7144768

Many McDonald's stores in Japan stopped taking in-person and mobile
customer orders because of the system disruption, a spokesperson at
McDonald's Holdings Company Japan said, adding that the company was working
to restore operations soon.

A McDonald's Australia spokesperson said they were also aware of a
technology outage impacting its restaurants nationwide and were working to
resolve this issue.

The company operates nearly 3,000 stores across Japan and roughly 1,000 in
Australia, its websites for the regions show.

------------------------------

Date: Fri, 15 Mar 2024 13:24:27 -0600
From: Matthew Kruk <mkrukg@gmail.com>
Subject: McDonald's blames global outage on third party (BBC)

https://www.bbc.com/news/business-68573106

McDonald's has revealed the technical problems which brought much of its
fast food chain to a standstill on Friday were caused by a third party
provider.

The international restaurant said the global outage happened during a
"configuration change" and stopped stores taking orders in the UK,
Australia and Japan -- amongst others.

McDonald's stressed the issue was not caused by a cyberattack.

------------------------------

Date: Fri, 15 Mar 2024 23:29:10 -0400
From: Monty Solomon <monty@roscom.com>
Subject: Phony Billionaires on Facebook Are Scamming Americans Out of
Their Life Savings (WashPost)

A fake Bill Ackman, a bogus Cathie Wood and a false Steve Cohen are among
the impersonators luring victims on social media, and their real-life
counterparts can’t keep up. ‘It’s like a game of whack-a-mole.’