Month: May 2018

Enlarge / One the left, a legitimate Chrome extension. On the right, one of seven recently discovered malicious Chrome extensions impersonating it. (credit: Radware)

Criminals infected more than 100,000 computers with browser extensions that stole login credentials, surreptitiously mined cryptocurrencies, and engaged in click fraud. The malicious extensions were hosted in Google’s official Chrome Web Store.

The scam was active since at least March with seven malicious extensions known so far, researchers with security firm Radware reported Thursday. Google's security team removed five of the extensions on its own and removed two more after Radware reported them. In all, the malicious add-ons infected more than 100,000 users, at least one inside a "well-protected network" of an unnamed global manufacturing firm, Radware said.

Secure browser, weak link

Over the past eight months, malicious Chrome extensions have proved to be an Achilles' heel for the Internet's most widely used and arguably most secure browser. Last August, lax rules for securing extension-developer accounts led to the compromise of two extensions installed on millions of computers. In two separate incidents in January, researchers found at least five malicious extensions installed more than 500,000 times. Two weeks ago, Trend Micro documented the return of FacexWorm, a malicious extension that was first spotted seven months earlier.

Enlarge / One the left, a legitimate Chrome extension. On the right, one of seven recently discovered malicious Chrome extensions impersonating it. (credit: Radware)

Criminals infected more than 100,000 computers with browser extensions that stole login credentials, surreptitiously mined cryptocurrencies, and engaged in click fraud. The malicious extensions were hosted in Google’s official Chrome Web Store.

The scam was active since at least March with seven malicious extensions known so far, researchers with security firm Radware reported Thursday. Google's security team removed five of the extensions on its own and removed two more after Radware reported them. In all, the malicious add-ons infected more than 100,000 users, at least one inside a "well-protected network" of an unnamed global manufacturing firm, Radware said.

Secure browser, weak link

Over the past eight months, malicious Chrome extensions have proved to be an Achilles' heel for the Internet's most widely used and arguably most secure browser. Last August, lax rules for securing extension-developer accounts led to the compromise of two extensions installed on millions of computers. In two separate incidents in January, researchers found at least five malicious extensions installed more than 500,000 times. Two weeks ago, Trend Micro documented the return of FacexWorm, a malicious extension that was first spotted seven months earlier.

Lithium

Klout, a service that tracks how much social media attention its users draw and rates their expertise based on the content of their posts, will be switched off on May 25—an announcement that has, ironically, had Klout trending on Twitter today.

The service, which launched in 2008, also offered an application-programming interface that allowed businesses to collect analytics data about their audiences. Klout also offered "perks" to individuals based on their scores and demographics.

Enlarge / Bre Burns showing off her pinball machine. (credit: The Brothers Brick)

If you're a nostalgia-minded geek, you might have a soft spot for the classic Space Lego sets, with their iconic orbiting rocket ship logo. You might also be fond of the physical action of pinball, full of tactile sensations so often missing from modern gaming. You probably never expected the two to meet in one of the more amazingly geeky pairings in recent memory, a pinball machine called Benny's Spaceship Adventure made entirely of Lego bricks.

Lego enthusiast Bre Burns used over 15,000 Lego bricks to build a fully functional pinball machine, and it's amazing. Every part (minus the plywood base used to help safely transport it) is made from Lego pieces, from official Lego rubber bands in the bumpers to Mindstorms steel castor balls—no glue, screws, or custom parts. The scoring, sounds, and electronics are controlled by three Lego Mindstorm NXT programmable bricks connected over Bluetooth. The Mindstorm systems include servo motors, touch sensors, color sensors, light sensors, and ultrasonic sensors, giving Benny's Spaceship Adventure a wide variety of ways to track and interact with the ball.

The dedication to staying with official parts continues to every detail. The LEDs are sourced from Lego, and so are the power sources, which can either be a Lego Power Functions battery box or a 9-volt Lego Trains speed regulator plugged into a wall socket. The game logic was all programmed using the native NXT-G environment. Perhaps the most authentic detail, though, comes from the side art, depicting a classic Space Lego helmet, with the bottom featuring the crack that every Space Lego owner knows is inevitable.

Greetings, Arsians! Courtesy of our friends at TechBargains, we have another round of deals to share. Today's list is led by an array of discounts on various Amazon devices, including its Fire HD 8 tablet, which is down to $60 from its usual $80.

While this isn't the absolute cheapest the Fire HD 8 has been, it's still a good price for a tablet that does the basics well. To be clear, this is not an iPad: it's made of plastic, it's not super fast, and the display can't get super bright. You also have to deal with ads on your lock screen at this price. But for those who just want a slate for checking emails, occasionally browsing the Web, or streaming Netflix, the Fire HD 8 holds up well enough. You could even buy a stand and use it as a pseudo-Echo Show. It's a decent option for a tablet-hungry kid, and Amazon's Fire OS is at least competent if you stick to media consumption.

If you have no need for a tablet, though, we also have deals on Echo Dot and Google Home Mini speakers, Dell laptops, wireless chargers, and more. Have a look for yourself below.