you-can-now-buy-nfts-on-ebay,-and-‘blockchain-driven-collectibles’-are-coming-soon

You can now buy NFTs on eBay, and ‘blockchain-driven collectibles’ are coming soon

eBay is now allowing NFTs to be sold on its platform, making the digital collectibles available side by side with physical ones. Whether you’re looking for a physical Dogecoin replica or a digital representation of Elon Musk holding Doge, eBay is apparently now the place to get both.

At the moment, eBay wants to make sure that NFTs are listed by trusted sellers, and only in certain categories like trading cards, music, entertainment, and art. The company does say, though, that it hopes to expand its policies and tools in the future to allow more categories after it’s gathered feedback from the community with the current crop of NFTs.

The first result when searching “NFT” on eBay, to the surprise of no one.

The blog post also mentions future updates to allow “blockchain-driven collectables,” though it doesn’t expand on what that means outside of NFTs.

eBay’s CEO said earlier this month that the company would be open to accepting cryptocurrencies in the future, but at the moment the NFTs being sold on the platform seem to be using its standard payment system linked to a credit card or PayPal account.

the-cybersecurity-‘pandemic’-that-led-to-the-colonial-pipeline-disaster

The cybersecurity ‘pandemic’ that led to the Colonial Pipeline disaster

The cyberattack that forced the Colonial Pipeline offline is just one failure to address existing weaknesses and an escalating “ransomware pandemic,” experts tell The Verge. That leaves the nation’s energy infrastructure especially vulnerable, even though there are basic steps that could have been taken to prevent the crisis that’s unfolding now.

“Honestly, I think for anyone who’s been tracking ransomware closely, this really shouldn’t be a surprise,” says Philip Reiner, CEO of the nonprofit Institute for Security and Technology. “This is yet another example of what is really a ransomware pandemic that needs to be addressed at the highest level.”

An escalating threat from bad actors, like the criminal group DarkSide that’s believed to be behind the attack on Colonial Pipeline, is coinciding with more potential weak points in the energy sector’s cyber infrastructure. Reiner says ransomware poses growing risks to critical infrastructure beyond energy, including health care and financial systems. Hackers have targeted tech, too. A subcontractor for Apple was hit with a $50 million ransomware attack just last month. But the energy sector seems particularly vulnerable to all kinds of cyber threats.

“This is the kind of thing that keeps folks like us awake at night,” says Tucker Bailey, a partner and cybersecurity expert at consultancy McKinsey & Company. “We’ve known that the [vulnerabilities] have been there for a while.

Almost half of all the East Coast’s fuel typically travels through the Colonial Pipeline, which has been shuttered since May 7th. The pipeline company’s IT system fell victim to ransomware, a type of cyber attack in which hackers demand payment to bring systems back online. DarkSide also stole data from the company and threatened to publish it online, Bloomberg reported.

The frequency and severity of attacks against utility systems is on the rise, according to the National Regulatory Research Institute. Fifty-six percent of utility professionals surveyed by Siemens in 2019 said they had experienced at least one attack over the previous year that led to an outage or a loss of private information. More than a third of the 796 “cyber incidents” reported to the Department of Homeland Security between 2013 and 2015 took place in the energy sector.

A collision of a couple key factors could drive those numbers up. First, there are more state actors, cybercriminals, and hacktivists targeting critical infrastructure, according to experts. Second, an increasingly digital power sector opens up more opportunities for hackers to attack.

“As everything is becoming more computerized, the controls for our critical infrastructure are also more computerized and steps need to be taken to ensure that they are protected from cyber attacks,” says Leslie Gordon, acting director for homeland security and justice at the watchdog Government Accountability Office (GAO). She says what happened to Colonial Pipeline is “an example of a failure to protect critical infrastructure.”

Companies are regularly failing to practice even basic security hygiene, which leaves critical infrastructure open to attack. Good security hygiene can include relatively simple things like requiring multi-factor authentication, having response plans ready, and keeping backup systems in place. With Colonial Pipeline, failing to keep its network segmented — so that bad actors can’t easily hop from one piece of the system to the next — was a big problem that shows a lack of cyber hygiene, according to Reiner. Colonial’s IT system was attacked, but that was connected to the company’s operating system, so it shut that down, too.

“One of the things we see here is another example of basic steps not being taken in order to secure your systems,” Reiner says. “Cyber hygiene, or the lack thereof, is really one of the greatest causes of cyber crime. It’s not so much that these guys are so good. It’s just people leave very basic things undone.”

President Joe Biden is expected to announce an executive order that could require contractors the federal government works with to take those kinds of safety measures, and last month, the administration launched a 100-day plan to tackle “increasing cyber threats” to the US electric system. It includes working with utilities to build up their capacity to stop, detect, and respond to attacks. The Department of Energy also launched new research programs in March to make the energy sector more resilient to hazards, both physical and cyber.

But a workforce shortage is another lingering problem for the energy sector that could jeopardize those plans. There’s an estimated shortage of 498,480 cybersecurity workers in the US, a 2019 report found. The Transportation Security Administration, which oversees pipeline security, is short on inspectors and lacks a strategic workforce development plan to help it “carry out its pipeline security responsibilities,” a 2018 report by the GAO found. Three years after the agency recommended that the TSA fill that gap, the GAO says that has yet to happen (although the TSA reports that it’s in the middle of completing a workforce plan).

Until these basic problems are solved, the threat of cyberattacks will loom large over the energy system and other critical infrastructure. And while the attacks are virtual, the consequences can be quickly felt on the ground. The longer the Colonial Pipeline stays out of commission, the bigger the risk of gas stations, jet fuel, and even home heating oil running dry. The pipeline company did not respond to The Verge by time of publication but said in a statement that it’s bringing parts of its pipeline online in stages — with hopes that most operations will be restored by the end of the week.

twitter-is-testing-a-new-tip-jar-feature-for-sending-money-to-your-favorite-accounts

Twitter is testing a new Tip Jar feature for sending money to your favorite accounts

Twitter has started rolling out a new Tip Jar feature on its Android and iOS apps, which (as rumored) will allow users to send money directly to their favorite accounts.

To use the tip jar, simply tap on the freshly added dollar bill icon next to someone’s username when viewing their profile on one of Twitter’s mobile apps. Users will be able to toggle the tip jar feature, too (for those individuals or organizations that don’t want people just sending them cash out of the blue). Android users will also be able to send money in Twitter’s Clubhouse-like Spaces.

Tip Jar supports a variety of payment options and links: Bandcamp, Cash App, Patreon, Paypal, and Venmo. Twitter is using those services’ external payment processors for transactions; it doesn’t take a cut. All English language Twitter users can send tips starting today, but only a select group (including “creators, journalists, experts, and nonprofits”) can turn on the feature to accept money for now.

Users have been using Twitter to solicit tips or Patreon follows for years — ending viral threads with a shoutout to a SoundCloud account is practically a meme at this point. So it makes sense that Twitter would be looking to streamline the feature as part of its own app.

Notably, the only way to access Tip Jar right now is through navigating to a user’s profile. That means sending someone some money for a truly fantastic tweet will still take a bit more effort than, say, just liking or retweeting it.

The announcement tweet from Twitter also promises “more coming soon,” so it’s likely that we’ll continue to hear more about how Twitter is implementing tipping in the coming weeks and months.

irs-now-seeks-identities-of-american-cryptocurrency-traders

IRS Now Seeks Identities of American Cryptocurrency Traders

(Image credit: Shutterstock)

A federal court in the Northern District of California have authorized the United States Internal Revenue Service (IRS) to identify taxpayers that have used a cryptocurrency exchange. In particular, the IRS wants to know about taxpayers who conducted at least $20,000 in crypto transactions from 2016 to 2020. 

Cryptocurrencies were originally designed to be an anonymous payment method that could not be regulated by governments. But as they have become a widespread payment instrument as well as an investment asset for those who want to protect their savings and/or make some additional money, they quickly emerged on the radar of tax collecting agencies, such as the IRS. Although crypto transactions are still anonymous, the process or buying or selling cryptocurrencies is not. To that end, it is not surprising that the IRS want to know about U.S. taxpayers who used cryptocurrencies in the past few years. 

For now, the court in California authorized the IRS to identify Americans who have used the services of Payward Ventures Inc. and its subsidiaries, such as Kraken, a digital currency exchange headquartered in San Francisco, California. The IRS is seeking information about taxpayers who conducted at least the equivalent of $20,000 in transactions. Meanwhile, on April 1, 2021, a federal court in the District of Massachusetts granted an order for the IRS to serve a similar John Doe summons on Circle, an exchange from Boston. In the future, the IRS may be authorized to identify customers of other crypto exchanges.  

“Gathering the information in the summons approved today is an important step to ensure cryptocurrency owners are following the tax laws,” said Acting Assistant Attorney General David A. Hubbert of the Justice Department’s Tax Division. “Those who transact with cryptocurrency must meet their tax obligations like any other taxpayer.” 

It remains to be seen how serious the IRS about taxing owners of cryptocurrency is. There are hundreds of crypto exchanges not only in the U.S., but around the world and theoretically an American taxpayer could use any of such services.