Checkm8: Ein unfixbarer Jailbreak für iPhones

Ein Sicherheitsforscher hat einen Exploit veröffentlicht, der einen Jailbreak bei vielen Apple-Geräten bis hin zum iPhone X ermöglicht. Über die Sicherheitslücke kann nicht autorisierte Software eingespielt werden. Apple kann die Lücke nicht durch ein …

Ein Sicherheitsforscher hat einen Exploit veröffentlicht, der einen Jailbreak bei vielen Apple-Geräten bis hin zum iPhone X ermöglicht. Über die Sicherheitslücke kann nicht autorisierte Software eingespielt werden. Apple kann die Lücke nicht durch ein Update beheben. (Jailbreak, Apple)

On Netflix and next projects, a night in genre-king Bong Joon-Ho’s lecture hall

Ahead of Parasite‘s US release, the director treats Texas fans to pseudo film school.

Seated in the simulcast overflow room for Bong Joon-Ho (center). Evidently the first ~350 person lecture hall filled up an hour and a half early. There were definitely people sitting on the floor in the second.

Enlarge / Seated in the simulcast overflow room for Bong Joon-Ho (center). Evidently the first ~350 person lecture hall filled up an hour and a half early. There were definitely people sitting on the floor in the second. (credit: Nathan Mattise)

AUSTIN, Texas—Usually when people line up for two hours or more in Austin, Texas, barbecue awaits at the other end. But the Fleming Lecture Hall at the University of Texas didn't suddenly start producing world-class brisket last Wednesday. Instead, in what may be a first, roughly 700 people lined up and then descended upon the humble classroom for a lecture at 5pm on a weeknight.

Technically, it was a guest lecture. And in fairness, it's not every Wednesday that South Korean genre film legend Bong Joon-Ho (Snowpiercer, Okja) is both in Austin and available to sit for student questions.

But the best genre-film festival in the US (Fantastic Fest) was taking place a few miles south of UT's campus throughout last week, and Bong's latest work, Parasite, screened among the closing films. The filmmaker's PR rep also happens to be a UT alum, and so a special campus viewing took place earlier in the week ahead of this—the one time no one seemed willing to skip an evening lecture.

Read 15 remaining paragraphs | Comments

SSDs are on track to get bigger and cheaper thanks to PLC technology

Storage of five bits in every NAND cell is coming, courtesy of Intel and Toshiba.

This listing image is honestly a bit of a bait-and-switch: Optane isn't a NAND technology at all, and is about as far away from PLC as you can get.

Enlarge / This listing image is honestly a bit of a bait-and-switch: Optane isn't a NAND technology at all, and is about as far away from PLC as you can get. (credit: Intel Corporation)

Wednesday, Intel announced it's joining Toshiba in the PLC (Penta-Level Cell, meaning 5 bits stored per individual NAND cell) club. Intel has not yet commercialized the technology, so you can't go and buy a PLC SSD yet—but we can expect the technology will lead eventually to higher-capacity and cheaper solid state drives.

To understand how and why this works, we need to go over a little bit of SSD design history. One of the most basic architectural features of a solid state disk is how many bits can be stored in each individual NAND cell. The simplest and most robust design is SLC—Single Layer Cell—in which each floating-gate NAND cell is either charged or not, representing a 1 or a 0. SLC flash can be written at very high speed and typically survives several times more write cycles than more complex designs can. (Endurance levels are specified per drive, but National Instruments uses 100K, 20K, and 3K as sample program/erase cycle endurance levels for SLC, eMLC, and MLC drives here.)

Although SLC flash is high performance, high endurance, and high reliability, it's also extremely expensive to manufacture. SSDs didn't hit the consumer market until MLC—Multi-Layer Cell—flash became widely available. Naturally, the storage industry being what it is, they confused things from here. These are the industry terms for the various NAND storage levels:

Read 5 remaining paragraphs | Comments

Glasfaser: Hannover will 1&1 Versatel nicht an Abwasserkanal lassen

Es würde erhebliche Kosten sparen und Glasfaser für Hannover schneller ermöglichen. Doch die Entwässerungsbetriebe wollen keine Leerrohre von 1&1 Versatel mit Glasfaser im Abwasserkanal. (Versatel, Glasfaser)

Es würde erhebliche Kosten sparen und Glasfaser für Hannover schneller ermöglichen. Doch die Entwässerungsbetriebe wollen keine Leerrohre von 1&1 Versatel mit Glasfaser im Abwasserkanal. (Versatel, Glasfaser)

Travis McCrea’s Answer to Ebook.bike Piracy Lawsuit Cites DMCA & Religious Defenses

In an answer to the copyright complaint filed in March by author John Van Stry, eBook.bike operator Travis McCrea stands by his earlier claim that he’s protected by the safe harbor provisions of the DMCA. However, the former Pirate Party leader also states that any failure to address infringement on the site, to the extent any existed, occurred when he tried to balance “religious beliefs” against “societal laws”.

Source: TF, for the latest info on copyright, file-sharing, torrent sites and more. We also have VPN reviews, discounts, offers and coupons.

Back in March, US-based author John Van Stry filed a copyright infringement lawsuit against Travis McCrea, the operator of eBook platform eBook.bike.

The direction of the case has been somewhat disorganized but rests on Van Stry’s basic claims that his books appeared on eBook.bike without his permission and weren’t taken down, resulting in breaches of copyright law.

McCrea, on the other hand, says that the DMCA notices he received from the author were deficient, meaning he has no case to answer. In August, a motion for default judgment filed by Van Stry was set aside, as was a motion to dismiss filed by McCrea. At that time, a trial date was provisionally set for June 2020.

This week, McCrea – who is defending himself – filed his answer to the 54-page complaint filed by Van Stry in March. In many respects it covers old ground, such as restating McCrea’s defense under the safe harbor provisions of the DMCA and reiterating the claim that Van Stry’s notices were deficient and thus contributed to any problems he may have faced.

Even more fundamentally, McCrea’s answer states that no evidence has been presented to the Court to back up Van Stry’s claim that eBook.bike ever advertised, imported, or distributed any copyrighted material. On that basis, McCrea denies all the claims to the contrary.

“No files have been submitted for evidence, nothing that proves that infringement actually happened at all, nothing that even shows the files were in fact on the servers,” he writes.

A significant portion of Van Stry’s original complaint focused on McCrea’s character and alleged previous conduct, describing him as having a “proud history of pervasive, blatant, and egregious violations of other persons’ intellectual property rights” as a key figure in the Pirate Party movement.

The complaint adds that McCrea was president/reverend of the Kopimist Church of Idaho – a spin-off from the pro-file-sharing Church of Kopimism which was recognized as a religion in Sweden back in 2012.

“‘Reverend’ McCrea is on record as having said that ‘giving away other people’s intellectual property’ is his ‘religious vocation’,” the complaint noted.

In his answer, McCrea says that none of these things should be taken as evidence that he breaks the law.

“[T]he Plaintiff shows that the Defendant is active politically but does not show a link between the political action and the Defendant’s desire to engage in illegal activities,” McCrea writes.

“The Defense accepts that the Defendant has both religious and political beliefs that deal with the concept of intellectual property laws. However, the 1st Amendment of the constitution protects the Defense for having political and religious beliefs.

“It is no more appropriate to allow the belief in Kopimism and the Pirate Party to be evidence for actually infringing in copyright as it would be to assume Baptists and/or a Republican are going to bomb an abortion clinic.”

Further underlining that someone’s religious beliefs don’t necessarily lead to them following every ‘rule’ to the letter, McCrea states that Leviticus 21:17-24 “essentially” tells follows to “shun ugly people” but Catholic Priests don’t do that. Jacob 2:24-30, he continues, references “plural marriage” but Mormons largely reject that because it’s illegal.

“You can believe in something without practicing it. The defense denies wrongdoing and will make a subsequent motion to have religious references struck from the case,” he adds.

But even with that said, McCrea cites religion as at least part of his defense. Noting that Van Stry has provided no proof of infringement and that in any event eBook.bike is protected under the DMCA, he accuses the author of introducing conjecture of a nature that potentially violates his human rights and ability to practice religion without persecution.

“An argument will be made that in a worst case scenario where the Defendant had failed to adequately address the copyright infringement per the DMCA it was only acting in a way to balance their religious beliefs against the societal laws that also bound them,” the answer reads.

“When a religion is acting without harm to those around them, leeway must be given to allow them to exercise their right to free expression as per the First Amendment.”

In closing, McCrea calls for Van Stry to “take nothing” and judgment to be awarded in his favor, including recovering all costs related to the lawsuit from the author and any additional relief the Court deems appropriate.

McCrea’s answer can be obtained here (pdf)

Source: TF, for the latest info on copyright, file-sharing, torrent sites and more. We also have VPN reviews, discounts, offers and coupons.

Developer of Checkm8 explains why iDevice jailbreak exploit is a game changer

Unpatchable vulnerability is a game-changer that even Apple will be unable to stop.

The bootrom of an Apple Watch Series 3, as shown through a hex viewer. Yep, Apple Watches series 1, 2, and 3 are also vulnerable to Checkm8.

Enlarge / The bootrom of an Apple Watch Series 3, as shown through a hex viewer. Yep, Apple Watches series 1, 2, and 3 are also vulnerable to Checkm8.

Often, when new iOS jailbreaks become public, the event is bittersweet. The exploit allowing people to bypass restrictions Apple puts into the mobile operating system allows hobbyists and researchers to customize their devices and gain valuable insights that may be peeking under the covers. That benefit is countered by the threat that the same jailbreak will give hackers a new way to install malware or unlock iPhones that are lost, stolen, or confiscated by unscrupulous authorities.

Friday saw the release of Checkm8. Unlike just about every jailbreak exploit released in the past nine years, it targets the iOS bootrom, which contains the very first code that's executed when an iDevice is turned on. Because the bootrom is contained in read-only memory inside a chip, jailbreak vulnerabilities that reside there can't be patched.

Checkm8 was developed by a hacker who uses the handle axi0mX. He's the developer of another jailbreak-enabling exploit called alloc8 that was released in 2017. Because it was the first known iOS bootrom exploit in seven years, it was of intense interest to researchers, but it worked only on the iPhone 3GS, which was seven years old by the time alloc8 went public. The limitation gave the exploit little practical application.

Read 50 remaining paragraphs | Comments

Feds say Boeing 737 needs to be better designed for humans

NTSB review suggests pilots may have been overwhelmed by multiple alerts and warnings.

Promotional image of Boeing 737 passenger jet plane.

Enlarge (credit: Boeing)

The two 737 MAX crashes that killed 346 people and led to what is, so far, a six-month grounding of the jet, stemmed in part from Boeing’s failure to accurately anticipate how pilots would respond to a malfunctioning feature that pointed the jets toward the ground. That’s the key finding from a report the National Transportation Safety Board published Thursday, which included a series of recommendations to the Federal Aviation Administration. The NTSB advised the regulator to have Boeing consider how 737 MAX pilots would handle not just problems with the MCAS system alone, but how they respond to multiple simultaneous alerts and indicators. In short, the NTSB says Boeing was wrong to assume pilots would respond correctly to the problem that ended up killing them.

The crashes of Lion Air Flight 610, in October 2018, and Ethiopian Airlines Flight 302, in March, stemmed from a feature Boeing designed to prevent stalls. In both cases, the Maneuvering Characteristics Augmentation System, or MCAS, activated in response to a false reading from a faulty angle of attack sensor. The pilots fought to counteract the system, which pushed the nose of the plane down, but ultimately failed.

Read 7 remaining paragraphs | Comments

Vernetzung: Cisco sieht 5G für außen und Wi-Fi 6 für innen

Cisco setzt als Ausrüster bisher eher auf Wi-Fi, baut aber auch bei 5G ein Angebot auf. Golem.de wollte wissen, wie der US-Konzern die Technologie im Vergleich sieht. (Cisco, Netzwerk)

Cisco setzt als Ausrüster bisher eher auf Wi-Fi, baut aber auch bei 5G ein Angebot auf. Golem.de wollte wissen, wie der US-Konzern die Technologie im Vergleich sieht. (Cisco, Netzwerk)

Most iPhones and iPads could be jailbroken via the new checkm8 exploit

A newly released exploit for iOS devices could mean that every iOS device with an Apple A5 through Apple A11 processor can be jailbroken. The new checkm8 exploit is said to work on everything from the iPhone 4S (2011) through the iPhone X (2017) could …

A newly released exploit for iOS devices could mean that every iOS device with an Apple A5 through Apple A11 processor can be jailbroken. The new checkm8 exploit is said to work on everything from the iPhone 4S (2011) through the iPhone X (2017) could be vulnerable to the new exploit — plus most iPads […]

The post Most iPhones and iPads could be jailbroken via the new checkm8 exploit appeared first on Liliputing.

Nonprofit fights TV networks in court to keep free TV service alive

Locast says ABC, CBS, Fox, and NBC limit reach of broadcasts to boost profits.

A TV set left on a sidewalk with a sign that says,

Enlarge (credit: Getty Images | Jacobo Zanella)

A nonprofit organization that provides free online access to broadcast TV stations has accused TV networks of colluding to limit access to those channels.

The nonprofit that runs Locast, the free TV service, made the allegations in an answer to a lawsuit filed by ABC, CBS, Fox, and NBC. The networks alleged in July that Locast is violating their copyrights and are seeking a permanent injunction to shut the TV service down. The Locast operator filed its answer to the TV networks' complaint yesterday and tried to turn the tables by making several counterclaims against the TV networks.

"Plaintiffs have colluded to limit the reasonable public access to the over-the-air signals that they are statutorily required to make available for free," Locast's court filing says. "[The networks] have opted instead to use their copyrights improperly to construct and protect a pay-TV model that forces consumers to forgo over-the-air programming or to pay cable, satellite, and online providers for access to programming that was intended to be free."

Read 14 remaining paragraphs | Comments