Critical Telegram flaw under attack disguised malware as benign images

If you haven’t updated your Windows app lately, now would be a good time.

Enlarge (credit: Kaspersky Lab)

Makers of the Telegram instant messenger have fixed a critical vulnerability that hackers were actively exploiting to install malware on users' computers, researchers said Tuesday.

The flaw, which resided in the Windows version of the messaging app, allowed attackers to disguise the names of attached files, researchers from security firm Kaspersky Lab said in a blog post. By using the text-formatting standard known as Unicode, attackers were able to cause characters in file names to appear from right to left, instead of the left-to-right order that's normal for most Western languages.

The technique worked by using the special Unicode formatting *U+202E* which causes text strings following it to be displayed from right to left. As a result, Telegram for Windows converted files with names such as "photo_high_regnp.js" to "photo_high_resj.png," giving the appearance they were benign image files rather than files that executed code.

Read 2 remaining paragraphs | Comments

Salon to ad-blockers: Can we use your browser to mine cryptocurrency?

Salon’s optional coin mining lets you avoid ads, but eats up your CPU power.

Enlarge / Salon's new message for ad-blockers. (credit: Salon)

Salon.com has a new, cryptocurrency-driven strategy for making money when readers block ads. If you want to read Salon without seeing ads, you can do so—as long as you let the website use your spare computing power to mine some coins.

If you visit Salon with an ad-blocker enabled, you might see a pop-up that asks you to disable the ad-blocker or "Block ads by allowing Salon to use your unused computing power."

Salon explains what's going on in a new FAQ. "How does Salon make money by using my processing power?" the FAQ says. "We intend to use a small percentage of your spare processing power to contribute to the advancement of technological discovery, evolution, and innovation. For our beta program, we'll start by applying your processing power to help support the evolution and growth of blockchain technology and cryptocurrencies."

Read 14 remaining paragraphs | Comments

The 2018 Toyota Camry might be proof most people don’t care about cars

The nation’s bestselling car is now in its eighth generation.

Toyota

It doesn't use exotic, lightweight materials. It doesn't have a clever electric powertrain. But the Toyota Camry is undoubtedly one of the most important cars we'll ever review, if only because Toyota sells so damn many of them.

The Camry is now in its eighth generation, and Toyota says this one is sportier and more upscale than Camrys of old. However, after a week with one—the $32,250 V6 XSE—I'm left with one conclusion: there are evidently an awful lot of car buyers out there who just don't care much about their cars.

Read 15 remaining paragraphs | Comments

Op-ed: The story behind the satellite that Trump wants dead

Analysis: it’s difficult to describe all the ways this is stupid.

Enlarge (credit: NASA)

There were plenty of striking things about Monday's budget news, given that it contained lots of draconian cuts that were simultaneously restored because Congress had boosted spending the week before. But perhaps the most striking among them was an item in the proposed budget for NASA: Trump wants to shut off a perfectly functional satellite.

That in itself is pretty shocking. But to truly appreciate just how awful this is, you have to understand the history of that satellite and what it means to the scientific community as a whole. So let's step back and take a look at why the Orbiting Carbon Observatory (or OCO) exists in the first place. It turns out it was built specifically to handle some outstanding questions of the sort that people in the administration say are important, and killing it would be an even larger waste of taxpayers' money than it may first appear.

Real uncertainty

The Orbiting Carbon Observatory's primary job is to see what's happening to the carbon dioxide levels in our atmosphere. You may think that's a solved issue: we're emitting a lot, and levels are going up. And that's true to a point. But once you pass that point, you enter a world where there are lots of details, and many of them matter.

Read 12 remaining paragraphs | Comments

Google to turn on Chrome’s (partial) ad blocker Thursday, Feb 15

As promised, Google has confirmed that this is the week its Chrome web browser will start blocking ads from some websites. The move may seem odd for a company that makes most of its money by selling internet ads. But it makes sense for a company that w…

As promised, Google has confirmed that this is the week its Chrome web browser will start blocking ads from some websites. The move may seem odd for a company that makes most of its money by selling internet ads. But it makes sense for a company that wants people to keep looking at some ads, because […]

Google to turn on Chrome’s (partial) ad blocker Thursday, Feb 15 is a post from: Liliputing

Dealmaster: Save $300 on a Dell XPS 13 laptop with a 8th-gen Core i7

Plus deals on 4K TVs, new Beats headphones, and early President’s Day discounts.

Greetings, Arsians! While the Dealmaster is making last-minute preparations for his Valentine's Day date with Lady Dealmaster, he's still got time to bring you the usual slate of gadget discounts thanks to our friends at TechBargains. Our list today is highlighted by an early President's Day deal on Dell's popular XPS 13 laptop, more specifically a configuration with a new Core i7-8550U processor, 8GB of RAM, and a 256GB SSD. It normally retails for $1,300; now, it's $1,000. Note that this isn't the absolute newest model of the XPS 13, but given how that notebook has a smaller battery and lacks USB-A ports, you might prefer this version anyway.

If you're not in the market for a new laptop, we also have deals on the newest Beats headphones, a wide variety of Amazon Echo and Fire devices, Google WiFi routers, lots of 4K TVs, and, yes, even a few chocolates for Valentine's Day. Have a look for yourself below.

(credit: TechBargains)

Note: Ars Technica may earn compensation for sales from links on this post through affiliate programs.

Read 11 remaining paragraphs | Comments

Woman pulls wiggling cattle worms from her eyeball, makes medical history

CDC experts suspect she just didn’t swat a fly away fast enough.

Enlarge / Gross. (credit: Getty | Tim Graham)

A 26-year-old Oregon woman has received the undesirable title of the first human to have tiny parasitic worms previously only ever seen in cattle squirming around in her eyeball.

Infectious disease experts reported that the woman had a total of 14 of the wriggling parasites pulled from her left eyeball after she experienced eye irritation. This happened in August 2016, although the experts only published their paper on Monday, February 12. The woman pulled most of the worms out herself over a 20-day period, despite visiting several doctors. The translucent worms were less than a half-inch long. Since then, she’s made a full recovery, with no more irritation or any evidence of additional worms.

Several of the parasites pulled from her peepers were sent to experts at the Centers for Disease Control and Prevention’s Parasitic Diseases Reference Laboratory. There, the worms were identified as Thelazia gulosa, a type of tiny worm that’s known to infect the eyeballs of cattle in the US and Southern Canada, as well as Europe, Central Asia, and Australia—but never seen in humans before. The authors report the find in the American Journal of Tropical Medicine and Hygiene.

Read 6 remaining paragraphs | Comments

EFF Urges US Copyright Office To Reject Proactive ‘Piracy’ Filters

As entertainment companies and Internet services spar over the boundaries of copyright law, the EFF is urging the US Copyright Office to keep “copyright’s safe harbors safe.” In a petition just filed with the office, the EFF warns that innovation will be stymied if Congress goes ahead with a plan to introduce proactive ‘piracy’ filters at the expense of the DMCA’s current safe harbor provisions.

Source: TF, for the latest info on copyright, file-sharing, torrent sites and more. We also have VPN discounts, offers and coupons

Faced with millions of individuals consuming unlicensed audiovisual content from a variety of sources, entertainment industry groups have been seeking solutions closer to the roots of the problem.

As widespread site-blocking attempts to tackle ‘pirate’ sites in the background, greater attention has turned to legal platforms that host both licensed and unlicensed content.

Under current legislation, these sites and services can do business relatively comfortably due to the so-called safe harbor provisions of the US Digital Millennium Copyright Act (DMCA) and the European Union Copyright Directive (EUCD).

Both sets of legislation ensure that Internet platforms can avoid being held liable for the actions of others provided they themselves address infringement when they are made aware of specific problems. If a video hosting site has a copy of an unlicensed movie uploaded by a user, for example, it must be removed within a reasonable timeframe upon request from the copyright holder.

However, in both the US and EU there is mounting pressure to make it more difficult for online services to achieve ‘safe harbor’ protections.

Entertainment industry groups believe that platforms use the law to turn a blind eye to infringing content uploaded by users, content that is often monetized before being taken down. With this in mind, copyright holders on both sides of the Atlantic are pressing for more proactive regimes, ones that will see Internet platforms install filtering mechanisms to spot and discard infringing content before it can reach the public.

While such a system would be welcomed by rightsholders, Internet companies are fearful of a future in which they could be held more liable for the infringements of others. They’re supported by the EFF, who yesterday presented a petition to the US Copyright Office urging caution over potential changes to the DMCA.

“As Internet users, website owners, and online entrepreneurs, we urge you to preserve and strengthen the Digital Millennium Copyright Act safe harbors for Internet service providers,” the EFF writes.

“The DMCA safe harbors are key to keeping the Internet open to all. They allow anyone to launch a website, app, or other service without fear of crippling liability for copyright infringement by users.”

It is clear that pressure to introduce mandatory filtering is a concern to the EFF. Filters are blunt instruments that cannot fathom the intricacies of fair use and are liable to stifle free speech and stymie innovation, they argue.

“Major media and entertainment companies and their surrogates want Congress to replace today’s DMCA with a new law that would require websites and Internet services to use automated filtering to enforce copyrights.

“Systems like these, no matter how sophisticated, cannot accurately determine the copyright status of a work, nor whether a use is licensed, a fair use, or otherwise non-infringing. Simply put, automated filters censor lawful and important speech,” the EFF warns.

While its introduction was voluntary and doesn’t affect the company’s safe harbor protections, YouTube already has its own content filtering system in place.

ContentID is able to detect the nature of some content uploaded by users and give copyright holders a chance to remove or monetize it. The company says that the majority of copyright disputes are now handled by ContentID but the system is not perfect and mistakes are regularly flagged by users and mentioned in the media.

However, ContentID was also very expensive to implement so expecting smaller companies to deploy something similar on much more limited budgets could be a burden too far, the EFF warns.

“What’s more, even deeply flawed filters are prohibitively expensive for all but the largest Internet services. Requiring all websites to implement filtering would reinforce the market power wielded by today’s large Internet services and allow them to stifle competition. We urge you to preserve effective, usable DMCA safe harbors, and encourage Congress to do the same,” the EFF notes.

The same arguments, for and against, are currently raging in Europe where the EU Commission proposed mandatory upload filtering in 2016. Since then, opposition to the proposals has been fierce, with warnings of potential human rights breaches and conflicts with existing copyright law.

Back in the US, there are additional requirements for a provider to qualify for safe harbor, including having a named designated agent tasked with receiving copyright infringement notifications. This person’s name must be listed on a platform’s website and submitted to the US Copyright Office, which maintains a centralized online directory of designated agents’ contact information.

Under new rules, agents must be re-registered with the Copyright Office every three years, despite that not being a requirement under the DMCA. The EFF is concerned that by simply failing to re-register an agent, an otherwise responsible website could lose its safe harbor protections, even if the agent’s details have remained the same.

“We’re concerned that the new requirement will particularly disadvantage small and nonprofit websites. We ask you to reconsider this rule,” the EFF concludes.

The EFF’s letter to the Copyright Office can be found here.

Source: TF, for the latest info on copyright, file-sharing, torrent sites and more. We also have VPN discounts, offers and coupons

Panasonic launches 12.1 inch, 2.2 pound laptop with Kaby Lake R (in Japan)

Panasonic is updating it’s Let’s Note line of compact laptop computers with a new model sporting a 12.1 inch, 1920 x 1200 pixel display and support for up to an Intel Core i7-8650U quad-core processor. It’s called the Let’s Note CF-SV7, and it’s a pret…

Panasonic is updating it’s Let’s Note line of compact laptop computers with a new model sporting a 12.1 inch, 1920 x 1200 pixel display and support for up to an Intel Core i7-8650U quad-core processor. It’s called the Let’s Note CF-SV7, and it’s a pretty unusual looking little computer… but it’s also a pretty expensive […]

Panasonic launches 12.1 inch, 2.2 pound laptop with Kaby Lake R (in Japan) is a post from: Liliputing

Trump’s infrastructure plan has no dedicated money for broadband

Broadband would be one of numerous projects competing for a pool of money.

Enlarge / President Donald Trump unveils his infrastructure plan in the State Dining Room at the White House February 12, 2018 in Washington, DC. (credit: Getty Images | Chip Somodevilla )

President Trump's new 10-year plan for "rebuilding infrastructure in America" doesn't contain any funding specifically earmarked for improving Internet access. Instead, the plan sets aside a pool of funding for numerous types of infrastructure projects, and broadband is one of the eligible categories.

The plan's $50 billion Rural Infrastructure Program lists broadband as one of five broad categories of eligible projects. Here's the full list:

  • Transportation: roads, bridges, public transit, rail, airports, and maritime and inland waterway ports.
  • Broadband (and other high-speed data and communication conduits).
  • Water and Waste: drinking water, wastewater, storm water, land revitalization, and Brownfields.
  • Power and Electric: governmental generation, transmission, and distribution facilities.
  • Water Resources: flood risk management, water supply, and waterways.

Eighty percent of the program's $50 billion would be "provided to the governor of each state." Governors would take the lead in deciding how the money would be spent in their states. The other 20 percent would pay for grants that could be used for any of the above project categories.

Read 20 remaining paragraphs | Comments