Smartphone-Tarif: Congstars Prepaid-Pakete erhalten verkürzte Laufzeit

Congstar baut die eigenen Prepaid-Pakete umfangreich um. Die Laufzeit wird von 30 auf 28 Tage verkürzt, die Preisstruktur ist komplett anders, und auch die Leistungen unterscheiden sich zu den bisherigen Tarifen erheblich. (Congstar, Mobilfunk)

Congstar baut die eigenen Prepaid-Pakete umfangreich um. Die Laufzeit wird von 30 auf 28 Tage verkürzt, die Preisstruktur ist komplett anders, und auch die Leistungen unterscheiden sich zu den bisherigen Tarifen erheblich. (Congstar, Mobilfunk)

Defcon Voting Village report: bug in one system could “flip Electoral College”

High-speed tabulator vulnerable to remote attacks, and that’s only part of the problem.

Electronic voting booth.

Enlarge / A voting machine is submitted to abuse in DEFCON's Voting Village. (credit: Sean Gallagher)

Today, six prominent information-security experts who took part in DEF CON's Voting Village in Las Vegas last month issued a report on vulnerabilities they had discovered in voting equipment and related computer systems. One vulnerability they discovered—in a high-speed vote-tabulating system used to count votes for entire counties in 23 states—could allow an attacker to remotely hijack the system over a network and alter the vote count, changing results for large blocks of voters. "Hacking just one of these machines could enable an attacker to flip the Electoral College and determine the outcome of a presidential election," the authors of the report warned.

The machine in question, the ES&S M650, is used for counting both regular and absentee ballots. The device from Election Systems & Software of Omaha, Nebraska, is essentially a networked high-speed scanner like those used for scanning standardized-test sheets, usually run on a network at the county clerk's office. Based on the QNX 4.2 operating system—a real-time operating system developed and marketed by BlackBerry, currently up to version 7.0—the M650 uses Iomega Zip drives to move election data to and from a Windows-based management system. It also stores results on a 128-megabyte SanDisk Flash storage device directly mounted on the system board. The results of tabulation are output as printed reports on an attached pin-feed printer.

The report authors—Matt Blaze of the University of Pennsylvania, Jake Braun of the University of Chicago, David Jefferson of the Verified Voting Foundation, Harri Hursti and Margaret MacAlpine of Nordic Innovation Labs, and DEF CON founder Jeff Moss—documented dozens of other severe vulnerabilities found in voting systems. They found that four major areas of "grave and undeniable" concern need to be addressed urgently. One of the most critical is the lack of any sort of supply-chain security for voting machines—there is no way to test the machines to see if they are trustworthy or if their components have been modified.

Read 3 remaining paragraphs | Comments

Carmack compares Oculus Quest hardware power to last-gen game consoles

Oculus CTO sees portable headset competing with Nintendo Switch in the market.

Article intro image

Any excuse to reuse this image of Carmack is a good one. (credit: Oculus VR)

SAN JOSE—In a wide-ranging and occasionally rambling unscripted talk at the Oculus Connect conference today, CTO John Carmack suggested the Oculus Quest headset was "in the neighborhood of power of an Xbox 360 or PS3."

That doesn't mean the Quest, which is powered by a Qualcomm Snapdragon 835 SoC, can generate VR scenes comparable to those seen in Xbox 360 or PS3 games, though. As Carmack pointed out, most games of that generation targeted a 1280x720 resolution at 30 frames per second. On Quest, the display target involves two 1280x1280 images per frame at 72fps. That's 8.5 times as many pixels per second, with additional high-end anti-aliasing effects needed for VR as well.

"It is not possible to take a game that was done at a high-quality level [on the Xbox 360 or PS3] and expect it to look good in VR," Carmack said.

Read 4 remaining paragraphs | Comments

Google backtracks—a bit—on controversial Chrome sign-in feature

Privacy-conscious users were unhappy at being signed in to browser without consent.

Article intro image

Enlarge (credit: Google Chrome)

Google will partially revert a controversial change made in Chrome 69 that unified signing in to Google's online properties and Chrome itself and which further preserved Google's cookies even when users chose to clear all cookies. Chrome 70, due in mid-October, will retain the unified signing in by default, but it will allow those who want to opt out to do so.

Chrome has long had the ability to sign in with a Google account. Doing this offers a number of useful features; most significantly, signed-in users can enable syncing of their browser data between devices, so tabs open on one machine can be listed and opened on another, passwords saved in the browser can be retrieved online, and so on. This signing in uses a regular Google account, the same as would be used to sign in to Gmail or the Google search engine.

Prior to Chrome 69, signing in to the browser was independent of signing in to a Google online property. You could be signed in to Gmail, for example, but signed out of the browser to ensure that your browsing data never gets synced and stored in the cloud. Chrome 69 unified the two: signing in to Google on the Web would automatically sign you in to the browser, using the same account. Similarly, signing out of a Google property on the Web would sign you out of the browser.

Read 6 remaining paragraphs | Comments

Last year’s flu was brutal—killing 80,000—but vaccine did better than expected

The estimates are the highest seen in more than a decade.

Yard sign reads

Enlarge / Get one. (credit: Getty | Jeff Greenberg)

The 2017-2018 flu season was brutal, leading to an estimated 80,000 deaths and 900,000 hospitalizations, according to new figures released Thursday, September 27, by the Centers for Disease Control and Prevention.

Those are the highest estimated tolls the health agency has calculated for any flu season in more than a decade, the CDC noted in an email to Ars. In recent years, flu-related death estimates have ranged from a high of 56,000 (2012-2013) to as low as 12,000 (2011-2012).

Those figures are all based on mathematic modeling after the fact; exact numbers are not available, the agency notes. For one thing, states aren’t required to report adult flu deaths to the CDC. Also, many death certificates will fail to list the flu anyway.

Read 6 remaining paragraphs | Comments

SEC lawsuit seeks to force Musk out as Tesla CEO and board member

Musk tweeted he had “funding secured” for a buyout. The SEC says that was false.

Image of an exasperated man giving a speech.

Enlarge / Elon Musk speaks at the 68th International Astronautical Congress 2017 in Adelaide on September 29, 2017. (credit: PETER PARKS/AFP/Getty Images)

The Securities and Exchange Commission has sued Tesla CEO Elon Musk over an August tweet he made claiming he had "funding secured" to take Tesla private at $420 per share. The SEC says that this and subsequent tweets were false and misleading—and therefore a violation of market-manipulation laws.

The stakes are high. In addition to seeking financial penalties and an injunction against similar tweets in the future, the SEC is also seeking that Musk "be prohibited from acting as an officer or director" of companies that issue shares under Section 12 or Section 15(d) of federal securities laws. Stephen Diamond, a securities law expert at Santa Clara Law School, tells Ars that means Musk would have to step down as Tesla's CEO and give up his board seat.

In another tweet, the same day as his initial buyout tweet, Musk claimed that "[i]nvestor support is confirmed. Only reason why this is not certain is that it's contingent on a shareholder vote."

Read 2 remaining paragraphs | Comments

Amazon’s Jeff Bezos will now sell rocket engines, too

Tory Bruno, chief of United Launch Alliance, “a real visionary and risk taker.”

White rocket lifts off amidst flames and smoke.

Enlarge / Artist's rendering of a Vulcan Centaur rocket launch. (credit: United Launch Alliance)

After a four-year, high-profile competition, rocket maker United Launch Alliance announced Thursday that it has selected the BE-4 rocket engine manufactured by Blue Origin to power its new Vulcan Centaur rocket. The new space company founded by Amazon's Jeff Bezos defeated the most storied rocket engine manufacturer in the United States, Aerojet Rocketdyne, which is developing the AR1 engine.

"We are pleased to enter into this partnership with Blue Origin and look forward to a successful first flight of our next-generation launch vehicle," United Launch Alliance's chief executive, Tory Bruno, said in a statement Thursday. He added that the Vulcan rocket remains on track for an initial flight in mid-2020.

"We are very glad to have our BE-4 engine selected by United Launch Alliance," Blue Origin Chief Executive Bob Smith also said. "United Launch Alliance is the premier launch-service provider for national security missions, and we're thrilled to be part of [its] team and that mission. We can't thank Tory Bruno and the entire United Launch Alliance team enough for entrusting our engine to powering the Vulcan rocket's first stage."

Read 13 remaining paragraphs | Comments

Oppo Find X smartphone with 10GB of RAM could be on the way

Oppo may be preparing to offer one of the first smartphones with 10GB of RAM. A listing on China’s TENAA website suggests that a 10GB version of the Oppo Find X could be in the works. The Find X is a premium smartphone with high-end specs, a near…

Oppo may be preparing to offer one of the first smartphones with 10GB of RAM. A listing on China’s TENAA website suggests that a 10GB version of the Oppo Find X could be in the works. The Find X is a premium smartphone with high-end specs, a nearly all-screen design, and a slide-out camera system […]

The post Oppo Find X smartphone with 10GB of RAM could be on the way appeared first on Liliputing.

Cox Highlights Double Standard and Wildly Inaccurate Notices in Piracy Case

Internet provider Cox Communications has responded to the federal complaint filed by several major record labels. The ISP refutes all copyright infringement claims and notes that DMCA notices can be wildly inaccurate. In addition, it mentions that under the “Copyright Alert System,” which the labels were part of, ISPs were not required to terminate subscribers.

Source: TF, for the latest info on copyright, file-sharing, torrent sites and more. We also have VPN reviews, discounts, offers and coupons.

Last month, Cox ended its piracy liability lawsuit with music company BMG, agreeing to a “substantial settlement.”

That doesn’t mean that the ISP is now in the clear. Cox is also caught up in another lawsuit filed by a group of major music labels, all members of the RIAA.

The labels argue that Cox categorically failed to terminate repeat copyright infringers and that it substantially profited from this ongoing ‘piracy’ activity. All at the expense of the record labels and other rightsholders.

This week Cox submitted a reply to the complaint, denying all these allegations. It requests a declaratory judgment from the court stating that it’s not liable for any copyright infringements carried out by its customers.

“Cox does not control the Internet,” the company writes, adding that it has “no ability to remove or take down infringing content from its customers’ computers” and “cannot restrict, or even detect, the specific content that its customers access or share.”

“Cox does not spy on its customers or monitor their Internet traffic. Even if it could do so — and it cannot — it wouldn’t. Engaging in surveillance in such a fashion would violate Cox’s policies, ethics, and corporate culture.”

The record labels are unlikely to refute any of the above. The real dispute, however, is about whether Cox should have terminated customers for whom it received many notices. The labels previously argued that 20,000 Cox subscribers can be categorized as blatant repeat infringers, some of whom have been ‘warned’ more than 100 times.

Writing to the court, the ISP counters that these notices could not be trusted or easily verified.

“The systems Plaintiffs used to detect infringement and send copyright infringement notices were unreliable, and were known to be unreliable,” Cox writes, adding that it “lacked the ability to verify Plaintiffs’ allegations of infringement.”

“Indeed, studies and published reports show that such notices can be wildly inaccurate,” Cox writes, pointing to an academic report as well as a TorrentFreak article which shows how HBO targeted its own website.

DMCA notice inaccuracies

This critique on the accuracy of DMCA notices is not new. It has repeatedly been highlighted in similar cases.

Perhaps more novel is Cox’s mention of the “six strikes” Copyright Alert System. This was a partnership between US ISPs and copyright holders, including many of the labels, to forward infringing notices to pirating customers.

This groundbreaking deal set a limit on the number of copyright notices ISPs had to process. Perhaps more crucially, it didn’t require the companies to terminate repeat infringers, even after 100+ warnings.

This is an interesting ‘double standard’ angle, as the labels now accuse Cox of failing to terminate repeat infringers, something that was never a requirement under the Copyright Alert System.

This deal (which Cox wasn’t part of) was still active during the time period that’s covered by the lawsuit, and apparently, the RIAA was pretty happy with it at the time.

“In May 2014, RIAA Chairman and CEO Cary Sherman described the Center for Copyright Information as ‘a model for success,’ Cox writes, adding that he lauded program and all its accomplishments.

Fast forward a few years and now ISPs are being sued for adhering to the same standard as set out in the groundbreaking Copyright Alert System.

Based on these and other arguments, Cox requests a declaratory judgment stating that it’s not liable for contributory infringement, and another declaratory judgment clarifying that it’s not vicariously liable for pirating subscribers.

A copy of Cox recent filing is available here (pdf).

Source: TF, for the latest info on copyright, file-sharing, torrent sites and more. We also have VPN reviews, discounts, offers and coupons.

Oppo launches Realme 2 Pro smartphone in India for $200 and up

After launching the $130 Realme 1 smartphone for the Indian market in May, Oppo is back with a new model sporting better specs, a bigger screen, and a higher price tag. But the Realme 2 Pro is still pretty affordable for a phone with a Qualcomm Snapdra…

After launching the $130 Realme 1 smartphone for the Indian market in May, Oppo is back with a new model sporting better specs, a bigger screen, and a higher price tag. But the Realme 2 Pro is still pretty affordable for a phone with a Qualcomm Snapdragon 660 processor, dual rear cameras, a fingerprint sensor, […]

The post Oppo launches Realme 2 Pro smartphone in India for $200 and up appeared first on Liliputing.