Technology

Texts from HMRC could show taxpayers’ location • The Register

Exclusive Britain’s tax collection agency asked a contractor to use the SS7 mobile phone signalling protocol that would make available location data of alleged tax defaulters, a High Court lawsuit has revealed.

Her Majesty’s Revenue and Customs had the potential to use SS7 to silently request that tax debtors’ mobile phones give up location data over the past six years, according to papers filed in an obscure court case about a contract dispute.

SMS provider MMGRP Ltd, operators of HMRC’s former 60886 text messaging service, filed a suit against the tax agency after losing the contract to send text messages on its behalf. Court documents obtained by The Register show that the secret surveillance capability was baked into otherwise mundane bulk SMS sending carried out by MMGRP Ltd.

The tax collection agency, which has the power to retrospectively change laws, had been using SMS reminder messages as an enforcement tool.

We asked HMRC for comment, posing a series of questions including how long had it used HLR look-up techniques against taxpayers; did HMRC obtain necessary warrants to carry out HLR lookups and, if so, under what legislation and from which courts; how many times it had used this technique; under what circumstances it was deployed; and is the capability present in a contract with its new supplier.

In response, the Brit tax collection agency admitted to using home location register (HLR) checks, although it maintained: “HLR checks were used solely to check if a customer’s phone number was still active before sending a SMS message.”

What the papers say

The since-settled lawsuit over an alleged breach of public procurement laws was filed by the company which operated HMRC’s former 60886 SMS sender number and brought the HMRC surveillance powers to light.

MMGRP sued the HMRC last summer alleging breach of public contract regulations after the tax authority awarded a multi-million pound deal to one of MMGRP’s rivals in March.

Particulars of claim filed in the High Court in July last year by the SMS provider said:

The document also said the agency had asked for the capability of doing more than merely verifying that tax demands sent by text had been delivered, quoting the contract between the pair as requiring, under “Existing Services”:

In its defence document filed a month later, on 19 August last year, HMRC’s legal team admitted that part of MMGRP’s case, meaning they did not contest its truth.

The Reg wonders why HMRC did not dispute this is the legal papers, and and why the capability was baked into the contract the tax collector was not going to use it.

Describing the contract outlined in the lawsuit as “slightly odd”, Professor Alan Woodward, the University of Surrey-based compsci expert, told The Register: “I can see how this might be required if HMRC must later prove that a letter was received and read in a specific jurisdiction. Someone they are taking to court might claim they never received it or that it had no effect where they were when they were served with some form of formal notice.”

He added: “As with other powers, provided there is suitable legislation, oversight and transparency then it may have a place in chasing some of the tax evaders.”

GSM security expert Tobias Engel told The Register this location-finding service looked like a natural bolt-on to the SMS systems MMGRP was providing to HMRC, characterising it as a fairly routine service feature.

“A few years back this was still very easy,” said Engel, “since getting SMS routing information (the infamous so-called ‘HLR lookup’) already revealed a coarse location of the phone, and that same routing information could then be used to query the network for a more precise location.”

How does it work?

Signalling System Number 7 (SS7) is the signalling protocol used by mobile phone networks to route Short Messaging Service (SMS) messages.

Using SS7 to detect where messages were received is relatively simple. In essence SS7 tells mobile networks where to send messages based on which mast a particular phone number was last connected to. A register of those connections is kept and can be queried.

Thus the technique is called Home Location Register (HLR) lookup. Commands exist for querying a network’s HLR for a particular Mobile Station Integrated Services Digital Network number (MSISDN, or “phone number” to you and I). If you know the location of a mast where that MSISDN was last connected, you’ve got a radius of where the phone could be located. Cross-referencing that radius with multiple masts helps triangulate a specific phone, and thus its user.

This is the data used by police forces and others to locate criminals by tracking their mobile phones.

Bitter contract dispute

MMGRP’s lawsuit came about after HMRC had repeatedly extended the contract following its original expiry date of July 2020.

HMRC leaned heavily on the SMS provider for those short-duration extensions, raising the spectre of “reputational damage to HMRC, to outer [sic] Government Departments who utilise the service and ultimately to [MMG] as a provider” if the company didn’t agree.

For its part, MMGRP admitted that director Daniel Layton, “in the heat of the moment” threatened to shut off HMRC’s SMS services altogether when the tax authority told him it was awarding the contract to another company instead of renewing at the end of its existing term in early 2021.

“Mr Layton rapidly withdrew that threat,” the company’s particulars of claim added.

Ultimately the service was awarded to rival business IMImobile after lots of short-term extensions with MMGRP.

MMRGP owns the old HMRC 60886 SMS shortcode, which is why taxpayers are no longer advised to look out for messages from that number.

The court case has since been settled. HMRC does not say on its website that it makes use of HLR technology to identify taxpayers’ locations – but does list a range of ways in which it might try to contact them. ®

Source link

Current

How Automated Moveable Medians Redefining Traffic Flow And Revolutionizing Road Safety

AI Revolutionizing Road Safety

The Voice Of EU | In today’s fast-paced world, where traffic congestion and road safety concerns continue to plague urban landscapes, the integration of advanced technology is becoming a beacon of hope for a safer, and more efficient transportation system. One such groundbreaking innovation that’s redefining traffic flow and ensuring safety on the roads is the implementation of Automated Moveable Medians (AMMs).

The Genesis of Automated Moveable Medians

The traditional median strip, often a static feature on roadways, primarily serves as a visual barrier between opposing lanes, minimizing head-on collisions and contributing to general road safety. However, these static medians often fall short in adapting to dynamic traffic patterns and fail to respond to changing conditions, leading to potential hazards during peak traffic hours or emergencies.

The concept of Automated Moveable Medians (AMMs) marks a paradigm shift in road safety and traffic management. These medians are equipped with cutting-edge AI, Machine Learning, and Robotics technologies, enabling them to autonomously adjust their positions based on real-time traffic conditions, thereby optimizing traffic flow and enhancing safety.

How Automated Moveable Medians Function

Utilizing a network of sensors, cameras, and AI algorithms, AMMs continuously monitor traffic density, speed, and patterns. When traffic begins to congest in one direction, the AMMs autonomously shift their positions, reallocating lanes to accommodate the higher traffic volume. By dynamically altering the median’s position, these systems effectively create additional lanes or expand existing ones, mitigating congestion and reducing the likelihood of accidents.

Statistical Insights Driving Adoption

According to recent studies conducted by transportation authorities in major urban centers:

– AMMs have shown a remarkable reduction of up to 30% in the number of accidents caused by lane misallocation or static medians’ inability to adapt to dynamic traffic.

– Improved traffic flow has led to a significant decrease in commute times by an average of 15%-25% during peak hours.

– Real-time adjustments by AMMs have demonstrated a 25% decrease in overall congestion levels on highly trafficked roads.

– Reduced congestion and smoother traffic flow have translated into a notable decline of up to 30% in carbon emissions in these areas.

The Future Prospects and Challenges

While the advent of AMMs presents a promising solution to traffic-related issues, there are challenges to address. Ensuring the seamless integration of these systems into existing infrastructures, addressing potential cybersecurity threats, and navigating regulatory frameworks are essential considerations for wider implementation.

Moreover, while AMMs offer a viable solution for major roads and highways, their application in densely populated urban areas and narrower streets requires meticulous planning to avoid hindering pedestrian movement and emergency services’ access.

Collaborative Efforts for Implementation

The successful implementation and scalability of AMMs hinge upon collaborative efforts among transportation authorities, urban planners, AI developers, and governmental bodies. The synergy of expertise from these diverse sectors can facilitate the deployment of AMMs in high-priority areas, improving road safety and traffic management.

The emergence of Automated Moveable Medians heralds a new era in transportation innovation. By leveraging advanced technologies, these dynamic systems are not only enhancing traffic flow but also contributing significantly to road safety, making our streets safer and more efficient for all commuters.

We Can’t Thank You Enough For Your Support!

— By John Elf, Contributor “The Voice Of EU”

— For more information: info@VoiceOfEU.com

— Anonymous news submissions: press@VoiceOfEU.com

Global Affairs

Open Source Software (OSS) Supply Chain, Security Risks And Countermeasures

OSS Security Risks And Countermeasures

The software development landscape increasingly hinges on open source components, significantly aiding continuous integration, DevOps practices, and daily updates. Last year, Synopsys discovered that 97% of codebases in 2022 incorporated open source, with specific sectors like computer hardware, cybersecurity, energy, and the Internet of Things (IoT) reaching 100% OSS integration.

While leveraging open source enhances efficiency, cost-effectiveness, and developer productivity, it inadvertently paves a path for threat actors seeking to exploit the software supply chain. Enterprises often lack visibility into their software contents due to complex involvement from multiple sources, raising concerns highlighted in VMware’s report last year. Issues include reliance on communities to patch vulnerabilities and associated security risks.

Raza Qadri, founder of Vibertron Technologies, emphasizes OSS’s pivotal role in critical infrastructure but underscores the shock experienced by developers and executives regarding their applications’ OSS contribution. Notably, Qadri cites that 95% of vulnerabilities surface in “transitive main dependencies,” indirectly added open source packages.

Qadri also acknowledges developers’ long-standing use of open source. However, recent years have witnessed heightened awareness, not just among developers but also among attackers. Malware attacks targeting the software supply chain have surged, as demonstrated in significant breaches like SolarWinds, Kaseya, and the Log4j exploit.

Log4j’s widespread use exemplifies the consolidation of risk linked to extensively employed components. This popular Java-based logging tool’s vulnerabilities showcase the systemic dependency on widely used software components, posing significant threats if exploited by attackers.

Moreover, injection of malware into repositories like GitHub, PyPI, and NPM has emerged as a growing threat. Cybercriminals generate malicious versions of popular code to deceive developers, exploiting vulnerabilities when components are downloaded, often without the developers’ knowledge.

Despite OSS’s security risks, its transparency and visibility compared to commercial software offer certain advantages. Qadri points out the swift response to Log4j vulnerabilities as an example, highlighting OSS’s collaborative nature.

Efforts to fortify software supply chain security are underway, buoyed by multi-vendor frameworks, vulnerability tracking tools, and cybersecurity products. However, additional steps, such as enforcing recalls for defective OSS components and implementing component-level firewalls akin to packet-level firewalls, are necessary to fortify defenses and mitigate malicious attacks.

Qadri underscores the need for a holistic approach involving software bills of materials (SBOMs) coupled with firewall-like capabilities to ensure a comprehensive understanding of software contents and preemptive measures against malicious threats.

As the software supply chain faces ongoing vulnerabilities and attacks, concerted efforts are imperative to bolster security measures, safeguard against threats, and fortify the foundational aspects of open source components.

We Can’t Thank You Enough For Your Support!

— By John Elf | Science, Technology & Business contributor VoiceOfEU.com Digital

— For more information: info@VoiceOfEU.com

— Anonymous news submissions: press@VoiceOfEU.com

Culture

Choco: Revolutionizing The FoodTech Industry With Innovation & Sustainability | EU20

By Clint Bailey

— In the rapidly evolving world of food technology, European startup Choco has emerged as a pioneering force. With its website, Choco.com, this Berlin-based company is transforming the way food industry professionals operate by leveraging innovative digital solutions. By linking restaurants, distributors, suppliers, and producers on a single platform, Choco is streamlining the supply chain process while promoting sustainability.

Let’s explore the journey of Choco.com and its impact on the overall foodtech industry.

Company: Choco Technologies GmbH
Website: www.Choco.com
Head Office: Berlin, Germany
Year Established: 2018
Founders: Choco was co-founded by Daniel Khachab, Julian Hammer, and Rogerio da Silva.
Industry: Choco operates in the foodtech industry, specifically focusing on digitizing the supply chain for the food industry.
Funding: Choco has secured significant funding rounds from investors, including Bessemer Venture Partners & Coatue Management.
Market Presence: Choco has a strong presence in several European cities, including Berlin, Paris, London & Barcelona.
Mission: Choco aims to revolutionize the food industry by leveraging technology to simplify supply chain management, promote sustainability, and reduce food waste.

Simplifying Supply Chain Management

One of the core focuses of Choco is to simplify supply chain management for food businesses. Traditionally, the procurement process in the food industry has been cumbersome and inefficient, with numerous intermediaries and manual processes. Choco’s digital platform replaces the traditional paper-based ordering system, allowing restaurants and suppliers to communicate and collaborate seamlessly.

Choco’s platform enables restaurants to place orders directly with suppliers, eliminating the need for phone calls, faxes, or emails. This not only saves time but also reduces the likelihood of errors and miscommunications.

By digitizing the ordering process, Choco improves transparency, making it easier for restaurants to compare prices, track deliveries, and manage inventory efficiently.

Streamlining Operations For Suppliers & Producers

Choco’s impact extends beyond restaurants. The platform also provides suppliers and producers with valuable tools to streamline their operations. By digitizing their product catalogs and integrating them into the Choco platform, suppliers can showcase their offerings to a wide network of potential buyers.

Suppliers benefit from increased visibility, enabling them to reach new customers and expand their market presence. Moreover, Choco’s platform helps suppliers manage their inventory, track orders, and plan deliveries effectively. These features enhance operational efficiency, reduce waste, and ultimately contribute to a more sustainable food system.

https://youtube.com/@choco233

YouTube Channel

Promoting Sustainability & Reducing Food Waste

Choco recognizes the critical importance of sustainability in the food industry. According to the United Nations, approximately one-third of the world’s food production goes to waste each year. By digitizing the supply chain and enabling more efficient ordering and inventory management, Choco actively works to combat this issue.

Choco’s platform facilitates data-driven decision-making for restaurants, suppliers, and producers. By analyzing purchasing patterns & demand, Choco helps businesses optimize their inventory levels, reducing overstocking and minimizing food waste. Additionally, Choco supports local sourcing, enabling businesses to connect with nearby suppliers & promote sustainable, community-based practices.

Expanding Reach & Impact

Since its founding in 2018, Choco has experienced rapid growth and expansion. The startup has successfully secured significant funding rounds, allowing it to scale its operations and establish a strong presence across Europe and other global markets. Today, Choco’s platform is used by thousands of restaurants and suppliers, revolutionizing the way they operate.

Choco’s impact extends beyond operational efficiency or sustainability. By connecting restaurants, suppliers & producers on a single platform, Choco fosters collaboration & encourages the exchange of ideas. This collaborative approach strengthens the overall foodtech ecosystem and creates a supportive community of like-minded aiming to drive positive change within the industry.

Future Of FoodTech

Choco’s rise to prominence in the foodtech industry exemplifies the reach of sustainability, innovation, and community. Through its user-friendly platform, Choco simplifies supply chain management, streamlines operations for restaurants & suppliers, and actively promotes sustainable practices. By harnessing the potential of digital, Choco is disrupting the future of the food industry, making it more efficient and transparent.

As Choco continues to expand its impact and reach, its transformative influence on the foodtech sector is set to inspiring, grow other startups, and established players to embrace technology for a better and more sustainable food system.

We Can’t Thank You Enough For Your Support!

— Compiled by Clint Bailey | Team ‘Voice of EU’
— For More Info. & News Submissions: info@VoiceOfEU.com
— For Anonymous News Submissions: press@VoiceOfEU.com