Game Protection Company Denuvo Fails to Protect Their Own Website

An oversight by game protection provider Denuvo has allowed anyone, including game crackers, to access sensitive files stored on Denuvo’s website.Several provide directories on the Denuvo website appears to have lost their protection, or were never pro…



An oversight by game protection provider Denuvo has allowed anyone, including game crackers, to access sensitive files stored on Denuvo's website.

Several provide directories on the Denuvo website appears to have lost their protection, or were never properly protected in the first place, and it has allowed anyone with a web browser to download and view the private files.

Instead of password protecting these private directories, many did not even have the "directory listing" feature disabled, which is usually the first thing server admins turn off when setting up a new website. With directory listing turned on, anyone can browse the contents of any directory that doesn't automatically direct to a web viewable file (such as index.html).

Once the flaw was discovered, many were quick to explore just what is on Denuvo's website, and some interesting files were discovered. One file, which appears to be a mail log (ajax.log), contained customer service emails dating back to 2014. These emails include conversations with game publishers such as Capcom and even Google, with these companies asking for more information on Denuvo's DRM-but-not-DRM products.

The log also contained emails from angry pirates, demanding to know why the company was keen to "f*** over pc gamers with DRM bullsh**" (sic).

More worryingly, the log also contains unencrypted private information, such as emails and phone numbers, for companies working with or interested in working with Denuvo.

Other files discovered include logs for the website itself, plus executables, one of which was a slide presentation detailing the company various security products.

At the time of writing, it appears the web admin team at Denuvo has already wised up to the potential security breach and, at the very least, turned off directory listings, and also deleted some of the more sensitive files, such as the ajax.log mail log file.

Tesla employee writes of low wages, poor morale; company denies claims

Jose Moran says mandatory overtime, poor equipment ergonomics have lead to injury, low morale.

Tesla Factory in Fremont, California. (credit: https://www.flickr.com/photos/pestoverde/8763130149/)

In a Medium post published today, Tesla employee Jose Moran detailed working conditions at the company’s Fremont factory and called for the factory workers to unionize with United Auto Workers (UAW).

Tesla currently employs more than 5,000 non-union workers at its Fremont, CA-based factory. Moran wrote that the workers are often faced with “excessive mandatory overtime” and earn between $17 and $21 hourly, compared with the national average of $25.58 hourly for most autoworkers in the US. The Tesla employee noted that the astronomical cost of living in the Bay Area makes $21 an hour difficult to live on.

The post was Moran’s first on Medium, and Ars could not find a way to contact him for further details.

Read 7 remaining paragraphs | Comments

French nuclear plant fire comes amid industry turmoil

France’s Flamanville plant due for a new reactor in 2018 just as an old turbine catches fire.

Enlarge / A photo taken on February 9, 2017 shows nuclear reactor number 1 ("Flamanville 1") of the Flamanville nuclear plant after an explosion at the plant in Flamanville, northwestern France. An explosion at the nuclear power plant on France's northwest coast caused minor injuries on February 9, but the authorities said there was no risk of radiation. The blast took place in the engine room at the Flamanville plant, which lies 25 kilometres (15 miles) west of the port of Cherbourg and just across from the Channel Islands. (credit: CHARLY TRIBALLEAU/AFP/Getty Images)

On Thursday morning the BBC reported that a turbine at the Flamanville nuclear power plant on the western shore of France caught fire after an explosion, although officials assured the public that there was no risk of nuclear contamination. The fire occurred in a building that housed the turbine that turns steam into electricity, “a few dozen yards from the nuclear reactor, which is isolated by a thick cement wall,” the Wall Street Journal reported.

Plant operators shut down reactor 1 at the two-reactor site (reactor 2 is still online). No one was hurt in the incident, but five workers reported feeling ill and were evaluated for smoke inhalation. According to Le Monde, plant operators ruled out an act of malice and suggested that the explosion and fire were due to overheating, although an official cause has not been determined yet.

According to The Independent, the French Nuclear Safety Authority (ASN) said the fire originated in a fan underneath an alternator.

Read 6 remaining paragraphs | Comments

9th Circuit will not reinstate Trump travel ban

Court: unchecked presidential power is contrary to “constitutional democracy.”

Enlarge (credit: Saul Loeb/Getty Images)

A federal appeals court late Thursday upheld a lower court's decision blocking the travel ban that was implemented under executive order by President Donald Trump two weeks ago.

The 9th US Circuit Court of Appeals was reviewing a decision by US District Judge James L. Robart, who last week ruled against Trump’s executive order and imposed a nationwide temporary restraining order. In both the hearings before the 9th Circuit earlier this week, as well as before the lower district court, lawyers from the Department of Justice largely argued that the states of Washington and Minnesota had no standing to challenge the executive order, and that it was well within the president's right to set immigration policy. The 9th Circuit disagreed on both counts.

"There is no precedent to support this claimed unreviewability, which runs contrary to the fundamental structure of our constitutional democracy," the appeals court concluded.

Read 8 remaining paragraphs | Comments

Google may remove (or hide) Play Store apps that lack privacy policies

Google may remove (or hide) Play Store apps that lack privacy policies

There are more than 2.6 million Android apps available for download from the Google Play Store. But soon some of them may disappear… or at least get harder to find. The Next Web reports that Google is setting a note to some developers letting them know that they have until March 15th to make sure […]

Google may remove (or hide) Play Store apps that lack privacy policies is a post from: Liliputing

Google may remove (or hide) Play Store apps that lack privacy policies

There are more than 2.6 million Android apps available for download from the Google Play Store. But soon some of them may disappear… or at least get harder to find. The Next Web reports that Google is setting a note to some developers letting them know that they have until March 15th to make sure […]

Google may remove (or hide) Play Store apps that lack privacy policies is a post from: Liliputing

TSA knows its airport behavior detection program is ineffective

ACLU: Documents in TSA’s files say program “is unscientific and unreliable.”

(credit: speed4)

The reliability of the Transportation Security Administration's program to weed out terrorists based on their behavior among travelers is coming under scrutiny. Doubts about the program are coming directly from within the TSA, according to documents the ACLU obtained from the agency via the Freedom of Information Act.

The ACLU report (PDF) says that the TSA's own files were loaded with research questioning the behavior detection program. The program has cost taxpayers more than $1.5 billion to deploy 3,000 detection officers at 176 airports nationwide over the last decade.

"Academic research and other documents in the TSA's own files reinforce that behavior detection is unscientific and unreliable," the ACLU said. "The TSA repeatedly overstated the scientific validity of behavior detection in communications with members of Congress and the Government Accountability Office."

Read 4 remaining paragraphs | Comments

Diarrhea-causing Salmonella can be weaponized to flush out cancer

In mice, armed bacteria infiltrated human tumors and triggered destruction.

Enlarge / Salmonella (credit: CDC)

A notorious germ best known for getting people rushing to the bathroom may one day have cancer patients headed to clinics for a new treatment instead.

With some genetic tweaking, Salmonella typhimurium transformed from a germ that causes mayhem in people’s intestines to one that can infiltrate deep into the bowels of tumors and spark immune system warfare. In a study published Wednesday in Science Translational Medicine, South Korean researchers reported that the weaponized gut bacteria could prevent human cancers from growing and spreading in mice—all with no evidence of harmful side-effects.

The study is just in mice and far more work is needed to test efficacy and safety in humans. But the researchers are encouraged by the data so far. Overall, it seems the trained germs have “excellent anticancer effects in diverse mouse tumor models, suggesting that this strategy could be applied to a wide spectrum of malignancies,” the authors conclude.

Read 10 remaining paragraphs | Comments

Bacteria bounce along walls like flies bounce along a window

New holographic imaging lets researchers track bacteria colliding with walls.

Enlarge / See this? This is what we want to avoid. (credit: Cynthia Sears, Johns Hopkins)

Everyone is familiar with it. The buzz of a fly, the thwack as it hits the window, followed by frantic buzzing noises. A fly is stuck against the window, skittering along as it blindly attempts to get through the glass. If only they'd read The Men Who Stare at Goats, they'd realize the futility of their actions. It turns out that bacteria do something similar (and also haven't done the required reading), but it's not due to their inability to recognize glass.

Bacteria form films that are, at best, a nuisance, and at worst, downright dangerous. Essentially, if you put a surface into a fluid containing bacteria, they will gather at the surface, possibly swapping stories about the good old minutes long gone. But given enough time, they will often grow into a sticky, cohesive film that covers the surface. On surgical implants and such, this needs to be avoided at all cost.

It's actually a bit strange that this happens at all. Bacteria that is freely swimming along in water is driven by a great flappy propellor, called a flagella. This thing doesn't really know where it's going, so eventually it runs into any walls that you've cruelly placed in its path. But this is a tiny object in a fluid, so it is subject to diffusion. In a short time, the forces of diffusion will reorient the bacteria, allowing it to blindly swim away from the surface.

Read 14 remaining paragraphs | Comments

Intel 8th gen Core “Coffee Lake’ chips coming later this year

Intel 8th gen Core “Coffee Lake’ chips coming later this year

Intel Says it’s on track to launch the first chips based on its 8th-gen “Core” technology in the second half of 2017. Code-named “Coffee Lake,” the new processors are manufactured using a 14nm process, much like most Core series chips Intel has released since late 2014. But Intel says its upcoming 8th-gen Core i7 processor will still […]

Intel 8th gen Core “Coffee Lake’ chips coming later this year is a post from: Liliputing

Intel 8th gen Core “Coffee Lake’ chips coming later this year

Intel Says it’s on track to launch the first chips based on its 8th-gen “Core” technology in the second half of 2017. Code-named “Coffee Lake,” the new processors are manufactured using a 14nm process, much like most Core series chips Intel has released since late 2014. But Intel says its upcoming 8th-gen Core i7 processor will still […]

Intel 8th gen Core “Coffee Lake’ chips coming later this year is a post from: Liliputing

Amazon Tap portable speaker gains always-listening option

Amazon Tap portable speaker gains always-listening option

One of the things that makes Amazon’s Echo products kind of magical is the fact that you don’t ever need to touch them. Just say “Alexa” or “Computer” into thin air and ask a question, and Echo will answer you, play music, or perform hundreds of other actions upon request. That’s a feature that’s been […]

Amazon Tap portable speaker gains always-listening option is a post from: Liliputing

Amazon Tap portable speaker gains always-listening option

One of the things that makes Amazon’s Echo products kind of magical is the fact that you don’t ever need to touch them. Just say “Alexa” or “Computer” into thin air and ask a question, and Echo will answer you, play music, or perform hundreds of other actions upon request. That’s a feature that’s been […]

Amazon Tap portable speaker gains always-listening option is a post from: Liliputing