Activists’ phones targeted by one of the world’s most advanced spyware apps

“Pegasus,” developed by Israel-based NSO Group, stalks 2 Moroccan, researchers say.

Activists’ phones targeted by one of the world’s most advanced spyware apps

Enlarge (credit: ShellyS / Flickr)

Mobile phones of two prominent human rights activists were repeatedly targeted with Pegasus, the highly advanced spyware made by Isreal-based NSO, researchers from Amnesty International reported this week.

The Moroccan human rights defenders received SMS text messages containing links to malicious sites. If clicked, the sites would attempt to install Pegasus, which as reported here and here, is one of the most advanced and full featured pieces of spyware ever to come to light. One of the activists was also repeatedly subjected to attacks that redirected visits intended for Yahoo to malicious sites. Amnesty International identified the targets as activist Maati Monjib and human rights lawyer Abdessadak El Bouchattaoui.

Serial pwner

It’s not the first time NSO spyware has been used to surveil activists or dissidents. In 2016, United Arab Emirates dissident Ahmed Mansoor received text messages that tried to lure him to a site that would install Pegasus on his fully patched iPhone. The site relied on three separate zeroday vulnerabilities in iOS. According to previous reports from Univision, Amnest International, and University of Toronto-based Citizen Lab, NSO spyware has also targeted:

Read 16 remaining paragraphs | Comments

Simjacker: SIM-Karten in 29 Ländern anfällig für SMS-Angriff

Mit einer präparierten SMS können Daten aus dem Mobiltelefon ausgelesen werden. Die Sicherheitsfirma Adaptive Mobile hat den Simjacker genannten Angriff entdeckt und die betroffenen Staaten veröffentlicht. Demnach nutzte in drei Ländern eine Überwachun…

Mit einer präparierten SMS können Daten aus dem Mobiltelefon ausgelesen werden. Die Sicherheitsfirma Adaptive Mobile hat den Simjacker genannten Angriff entdeckt und die betroffenen Staaten veröffentlicht. Demnach nutzte in drei Ländern eine Überwachungsfirma die Lücke aktiv aus. (Sicherheitslücke, Malware)

When practical effects ruled the world: VFX legend gets his due in new doc

New film explores iconic stop-motion animator’s work on Star Wars, Robocop, Jurassic Park.

The trailer for Phil Tippett—Mad Dreams and Monsters

No matter what the Criterion collector in your life says, DVDs have been slowly fading away from our lives these last few years. Losing films as a self-contained thing you can acquire has many ramifications, but chief among them for film nerds is the transformation of "extras." Where should things like deleted scenes, director's commentary, bloopers, or behind-the-scenes vignettes exist if they can no longer be packaged right alongside the film? Maybe today's YouTube videos, oral histories, or podcasts work well enough in many situations, but frankly, some innovators in film history deserve more.

Luckily, this type of content in 2019 has increasingly found a new streaming-era-friendly home: the standalone documentary. From Hayao Miyazaki: Never-Ending Man (essentially extras for Boro the Caterpillar) to The Director and The Jedi (that's The Last Jedi), these projects show that what would've been extras in the past can work as their own feature-length entities able to play to crowds of film lovers at festivals or exist as algorithmic suggestions alongside original films on Netflix, Amazon Prime, et al.

At the 2019 Fantastic Fest, this budding format proved to be just right for Phil Tippett, a film effects legend whose work you've seen even if his name doesn't ring any bells. From Star Wars to Jurassic Park with Robocop in between, Tippett is the stop-motion savant behind so many landmark "effects" films from the era before CGI took over. And the long time industry hero finally has the spotlight on him in Phil Tippett—Mad Dreams and Monsters, a new documentary delivering that familiar behind-the-scenes feeling in the best way possible.

Read 11 remaining paragraphs | Comments

Behold Corvette’s new racing car, now with its engine in the middle

It’s all change for Corvette Racing in 2020, with a brand new mid-engined layout.


BRASELTON, Georgia—When Chevrolet unveiled its new "C8" generation Corvette Stingray in July, the headline was that after more than 50 years, the engine in this new car had been moved from ahead of the cockpit to just behind it. At the end of that reveal, we then got a very brief glimpse of a heavily camouflaged racing derivative.

On Thursday, ahead of this year's season finale to IMSA's WeatherTech Sportscar Championship at Road Atlanta in Georgia, Corvette Racing gave us a proper look at that new race car, which is scheduled to start racing next year here in the US and also over in France at Le Mans.

Why did they move the engine?

If you look at a race car from Formula 1, IndyCar, or the prototypes that race in IMSA and Le Mans' top class, you'll find their engines located behind, not ahead, of the driver. The mid-engined layout really came to the fore in the early 1960s, when John Cooper's eponymous F1 team proved that the layout conferred some significant handling advantages. With the engine fully ahead of the rear axle, most of the car's weight is between the wheels, which makes for a much lower polar moment of inertia. And as the majority of the mass is toward the rear, there are traction advantages for the driven rear wheels.

Read 11 remaining paragraphs | Comments

Datenschutz: Gesundheitsapp Ada übermittelte persönliche Daten an Tracker

Schon vor der ersten Nutzereingabe hat die Gesundheitsapp Ada Daten an die Tracker von Amplitude und Facebook übermittelt. Später gab sie sogar Symptome weiter. Der Hersteller behauptet jedoch, keine Daten mit Dritten zu teilen. (Tracking, Datenschutz)

Schon vor der ersten Nutzereingabe hat die Gesundheitsapp Ada Daten an die Tracker von Amplitude und Facebook übermittelt. Später gab sie sogar Symptome weiter. Der Hersteller behauptet jedoch, keine Daten mit Dritten zu teilen. (Tracking, Datenschutz)

Ranked: Every Ticket to Ride map

With so many options, it can be hard to know where to start.

Welcome to Ars Cardboard, our weekend look at tabletop games! Check out our complete board gaming coverage at cardboard.arstechnica.com.

You may have played one of the most successful titles in tabletop gaming, Ticket to Ride. But have you tried all of the game’s expansions and standalone spinoffs? These additions introduce new boards and rules that tweak the basic format of drawing train cards and then placing trains to connect cities across each map with the goal of connecting more distant cities so you can complete Destination Tickets for more points.

I’ve counted 17 different maps so far (not counting Japan and Italy, which will be released in Europe at Spiel 2019 in late October and worldwide in January 2020. Also, the Märklin map is no longer available and won't be included in this exercise). That’s a lot for anyone to digest. So to help any Ticket to Ride faithful looking to expand, Ars has compiled this overview—along with my personal ranking—of all existing maps, some of which are also available in the wonderful mobile app version of the game. And if something below doesn't quite ride for you, let us know your favorites maps in the comments.

Read 17 remaining paragraphs | Comments

International Day Against DRM 2019 Focuses on Education

Today is International Day Against DRM, an annual protest against technology that restricts what we can do with purchased digital products and tools. The focus this year is on the right to read, with pressure placed on publishers to stop restricting access to education. It’s a noble cause that deserves support but sadly, as every year passes, the hill is becoming increasingly steep.

Source: TF, for the latest info on copyright, file-sharing, torrent sites and more. We also have VPN reviews, discounts, offers and coupons.

The Free Software Foundation’s Defective by Design campaign International Day Against Digital Restrictions Management is here again.

It’s been 12 months since the campaign celebrated the 12th anniversary of its quest to prompt, pressure and prevent companies from restricting what we can do with legitimately bought content and products.

This year the main focus is perhaps the noblest to date – the right to an education.

“Defective by Design is calling on you to stand up against Digital Restrictions Management (DRM) on the International Day Against DRM (IDAD) on October 12th, 2019,” the campaign site reads.

“This year we will be focusing specifically on everyone’s right to read, particularly by urging publishers to free students and educators from the unnecessary and cumbersome restrictions that make their access to necessary course materials far more difficult.”

The campaign homes-in on publishers including Pearson, which individually stands accused of placing “digital handcuffs” on students with a “Netflix-like” textbook model that requires constant Internet connections to validate purchases, limits how many pages of a title that can be read at a time, and monitors reading habits.

Defective By Design wants publishers to remove every piece of DRM from their educational materials, a lofty but particularly noble aim. There can be few students or educators out there who still believe that locking up papers, studies and similar material is the best way to impart knowledge and as a result, improve society.

Only time will tell whether that particular quest will bear fruit but reading the campaign’s notes one can’t help but feel there’s a mountain to climb in respect of the broader picture. While those with plenty of energy are invited to join in the chorus or even stage their own events, the section detailing how people can offer basic support is unintentionally depressing.

“The easiest way to participate is to join us in going a Day Without DRM, and resolve to spend an entire day (or longer!) without Netflix, Hulu, and other restricted services to show your support of the movement,” it reads.

“Document your experiences on social media using the tags ‘#idad’ or ‘#dbd,’ and let us know at info@defectivebydesign.org if you have a special story you’d like us to share.”

While a day without Netflix should be achievable, the site lists plenty of other companies that should be avoided, if one wants to seriously protest the spread of DRM. Doing without all of them will be a herculean task for any digital native.

For example, the black hole left by Netflix abstinence cannot be filled by listening to Spotify or Amazon Music, which are labeled by the campaign as “worst offenders” when it comes to DRM. Even with the benefit of music-free silence, people are encouraged not to use Amazon’s Kindle either.

It’s at this point you begin to realize how deeply entrenched DRM is and how difficult it will be to extract ourselves from it. The situation is further compounded when the list reveals that we should avoid using an iPad or indeed any Apple or Microsoft products.

Considering most desktop users are running Windows and millions of mobile users are Apple-based, spreading the hashtags ‘#idad’ or ‘#dbd’ on social media while strictly following the “boycott if possible” rules could rule out millions of participants. That is not what is needed today but so compromises will have to be made.

The moderately good news is that Android isn’t on the list as a “worst offender” but unfortunately it still incorporates DRM. And its developer, Google, has a page all of its own on the Defective By Design site, called out for being a promoter of DRM and for lobbying in favor of restrictive web standards.

We wish the International Day Against Digital Restrictions Management every success because very few people are still fighting this battle and the education element, in particular, is hard to understate. But in a world where profit trumps moral ideals at every turn, this war becomes more difficult to win with every passing year.

And in many cases, it’s arguably our own fault.

Support the 2019 campaign by visiting Defective By Design here

Source: TF, for the latest info on copyright, file-sharing, torrent sites and more. We also have VPN reviews, discounts, offers and coupons.

Facebook: Vier namhafte Unternehmen verlassen Libra

Vor einer Woche hat Paypal seinen Ausstieg aus dem Libra-Projekt erklärt, nun ziehen Visa, Mastercard, Stripe und Ebay nach. Damit verliert Libra binnen weniger Tage wichtige Unterstützer, die jedoch einen Wiedereinstieg offenlassen. (Libra, Soziales N…

Vor einer Woche hat Paypal seinen Ausstieg aus dem Libra-Projekt erklärt, nun ziehen Visa, Mastercard, Stripe und Ebay nach. Damit verliert Libra binnen weniger Tage wichtige Unterstützer, die jedoch einen Wiedereinstieg offenlassen. (Libra, Soziales Netz)

Why lightning strikes twice as often over shipping lanes

The heavens cast their wrath and fury on the ships more than on the fishes.

Lightning blazes across the night sky.

Enlarge (credit: John Fowler / Flickr)

For all the progress humanity has made since Odysseus had a spot of trouble on a long voyage home, life on the high seas remains a largely joyless affair. Twenty-first-century sailors spend weeks away from home. The hours are long, the pay mediocre, the risk of calamity never quite over the horizon. And, researchers have recently learned, these men and women face a problem not even the King of Ithaca had to deal with: unnaturally large amounts of lightning. Turns out that along some of the world’s busiest shipping lanes, lightning strikes are twice as common as they are in nearby areas with similar climatic conditions.

As usual in such stories, the blame doesn’t fall on a riled up Olympian. It goes to the hubris of humans who, in this case, thought their ships could burn filthy fuel without any judgement raining down.

Read 7 remaining paragraphs | Comments

Blizzard reinstates Hong Kong protestor’s prize, says “China had no influence”

Bans reversed; statement juggles cultural, political diversity with “focus on the game.”

After four days of mounting public pressure, Blizzard Entertainment took a late Friday opportunity—8:30pm ET, where press releases go to die—to partially undo its ban on three members of the Hearthstone esports community for making statements in support of Hong Kong.

The outright ban applied to professional Hearthstone player Ng "blitzchung" Wai Chung has since been changed to a six-month suspension from official Hearthstone esports tournaments. The original decision to strip him of the associated tournament's prize money has been reversed.

Additionally, the two Chinese broadcasters who interviewed (and possibly egged on) blitzchung during his shout of "Liberate Hong Kong, revolution of our age!" had been fired; they too have had their punishment changed to a six-month suspension from their jobs as official Hearthstone esports "casters."

Read 4 remaining paragraphs | Comments