Month: December 2015

Greetings, Arsians! Courtesy of our partners at TechBargains, we have a number of deals you can still get in time for the Christmas holiday. Some of the best deals include a 64GB Nexus 6P unlocked smartphone for $499 ($50 off of its original price) and a 32GB unlocked Nexus 6 handset for $249 (a whopping $400 off its original price). Both of those phones come with free one-day shipping as well, and you don't have to be an Amazon Prime member to get that perk. Amazon is also providing free one-day shipping on a number of hot items, including headphones, DSLR cameras, bluetooth speakers, fitness trackers, and much more.

Check out the full list of deals you can still get now below!

Featured

Enlarge (credit: ec-jpr)

Men who have sex with men are now allowed to donate blood, according to a revised policy posted today by the Food and Drug Administration.

The update reverses a previous policy that banned homosexual men from donating blood indefinitely—a recommendation that dates to 1983, the early days of the HIV/AIDS epidemic. However, to donate blood now, homosexual men must abstain from sexual contact for a year.

“Ultimately, the 12-month deferral window is supported by the best available scientific evidence, at this point in time, relevant to the US population,” Peter Marks, deputy director of the FDA’s Center for Biologics Evaluation and Research said in a press release. “We will continue to actively conduct research in this area and further revise our policies as new data emerge.”

The Juniper NetScreen 5200, one of the firewalls that carries the backdoor code inserted into Juniper's ScreenOS.

On December 17, Juniper Networks issued an urgent security advisory about "unauthorized code" found within the operating system used by some of the company's NetScreen firewalls and Secure Service Gateway (SSG) appliances. The vulnerability, which may have been in place in some firewalls as far back as 2012 and which shipped with systems to customers until late 2013, allows an attacker to gain remote administrative access to systems with telnet or ssh access enabled. And now researchers have both confirmed that the backdoor exists and developed a tool that can scan for affected systems.

In a post to the Rapid7 community blog site on December 20, Metasploit project founder and Rapid7 researcher H D Moore published an analysis of the affected versions of Juniper's ScreenOS operating system, including the administrative access password that had been hard-coded into the operating system. This backdoor, which was inserted into ScreenOS versions 6.2.0r15 through 6.2.0r18 and 6.3.0r12 through 6.3.0r20, is a change to the code that authorizes administrative access with the password "<<< %s(un='%s') = %u"—a password that Moore notes was crafted to resemble debug code to evade detection during review.

A side-by-side look at the Juniper ScreenOS code, with the backdoored code on the left and unaltered code on the right. The backdoor password is highlighted. (credit: Rapid7)

Since this code is in the firmware of the affected Juniper NetScreen and SSG appliances, the only way to remove it is to re-flash the firmware with a new version of ScreenOS. Steve Puluka has written a guide on how to perform the upgrade and avoid some of the potential problems around installation, including dealing with the configuration of a new signing key for the upgrade.

(credit: Kyle Orland)

A French consumer group has brought a lawsuit against Valve, saying the Steam and its required terms of service infringe on a number of European legal rights, including the right to legally resell purchased software.

The 64-year-old UFC-Que Choisir (the "federal union of consumers") argues that Valve must provide the capability for Steam users to resell their legally purchased digital games whenever they want. While noting that many online stores have similar resale restrictions, the group argues that the difference between being able to resell a physical game disc and not being able to resell a digitally purchased game is "incomprehensible... No court decision prohibits the resale on the second-hand market games bought online, and the European Court has even explicitly stated that it’s possible to resell software which, let’s remember, is an integral part of a video game."

The group is referring to a 2012 decision from the European Court of Justice that focused on the resale of downloadable enterprise software licensed from Oracle. "It makes no difference whether the copy of the computer program was made available by means of a download from the rightholder’s website or by means of a material medium such as a CD-ROM or DVD," the court ruled.

Enlarge / Would you ride back from space in this? The Soyuz TMA-17M spacecraft is seen after it landed on December 11 in Kazakhstan. It was -5 degrees Celsius outside. (credit: Bill Ingalls/NASA)

Just a little more than a week ago astronaut Kjell Lindgren prepared to take the ride of his life. The experience of returning to Earth inside a Soyuz spacecraft—likened to a fireball—may well be the most exciting thrill ride known to humans. Even before he departed for a year-long mission to the International Space Station, Soyuz reentry veteran Scott Kelly explained the ride thusly: "Even If I had hated the last six months, I would have done it all again for that last 20 minutes in the Soyuz.” This was fresh in Lindgren's mind as he strapped into the Soyuz spacecraft early on December 11.

"Scott had talked about that as well, in conversations we had had," Lindgren told Ars in an interview. "That certainly set an expectation in my mind for it being a lot of fun. We sometimes talk about things being fun, or type II fun, where it’s kind of fun in retrospect, but while you’re going through it, it’s maybe a little more arduous. I wasn't sure what this would be."

The ride begins quietly. Boring, even.

(credit: North Dakota State University)

Over the past couple of years, American labs have been caught mishandling biological samples that require extreme care: things like smallpox, anthrax, and avian flu. Largely in response to this, the White House issued a memo this past October 29 that outlined its vision of our future biosecurity and safety.

But in last week's Science, a trio of academics from Stanford lamented that the memo's approach was insufficient. Their exact criticism: “It grafts recommendations onto inadequate institutional structures and fails to address underlying systemic needs.”

When those assorted labs screwed up in their own distinctive ways, each was shut down and reviewed on a narrow, individualized basis. It is definitely great that the White House recognized that a more systematic, centralized approach is necessary but, according to this critique, they have not provided it.