Firefox gets patch for critical zeroday that’s being actively exploited

Flaw allows attackers to access sensitive memory locations that are normally off-limits.

Firefox gets patch for critical zeroday that’s being actively exploited

Enlarge (credit: Mozilla)

Mozilla has released a new version of Firefox that fixes an actively exploited zeroday that could allow attackers to take control of users' computers.

In an advisory, Mozilla rated the vulnerability critical and said it was "aware of targeted attacks in the wild abusing this flaw." The US Cybersecurity and Infrastructure Security Agency said one or more exploits were "detected in the wild" and warned that attacks could be exploited to "take control of an affected system." The Mozilla advisory credited researchers at China-based Qihoo 360 with reporting the flaw.

No other details about the attacks were immediately available. Neither Mozilla nor Qihoo 360 responded immediately to emails asking for more information.

Read 4 remaining paragraphs | Comments

In flashpoint for the rebellion against big tech, Sonos sues Google for patent infringement

Sonos showed Google its tech years ago without realizing they would compete.

Photograph of cylindrical smart speaker.

Enlarge / The Sonos One SL. (credit: Jeff Dunn)

In a move that has become the top talking point of CES and a flash point for an industry's pent-up frustrations, smart audio company Sonos has sued Google for infringement of five of its patents, The New York Times reports.

The publicly traded, Santa Barbara, California-based audio company sued Google in a federal court and the US International Trade Commission. The goal is to block sales of some of Google's products (including smart speakers and smartphones, among other things) and to collect financial damages.

According to the article, Sonos "handed over the effective blueprints to its speakers" to Google in 2013 during an effort to make Google's services work on said speakers. Sonos didn't anticipate it then, but Google later launched smart speakers that competed directly with Sonos' offerings. After Google's speakers hit the market, Sonos employees purchased some and used packet sniffing to analyze how the Google speakers worked with each other. They say they discovered that the speakers used technological solutions that Sonos has previously developed and patented. (They claim to have found the same when testing Amazon's Echo speakers, too.)

Read 14 remaining paragraphs | Comments

Boeing finally completes SLS core stage, packs it for Mississippi tests

Preliminary construction on this stage began in late 2015.

On Wednesday, Boeing moved the completed core stage of NASA's Space Launch System rocket from the Michoud Assembly Facility onto the space agency's Pegasus Barge. When weather conditions are favorable, the barge will carry the 64-meter rocket from the rocket factory near New Orleans to the Stennis Space Center in southern Mississippi.

"It was a beautiful day here," said John Shannon, Boeing's program manager for the SLS rocket, in a teleconference with reporters. "We had a spectacular view of this new national asset."

Finishing assembly of the core stage represents an important milestone for Boeing, which has spent most of the 2010s working with NASA on designing the SLS rocket and building the first core stage. Boeing began cutting metal on the very first barrels for this core stage, which will fly NASA's Artemis 1 mission, back in 2015 at the Louisiana-based facility. NASA has spent nearly $10 billion on the SLS rocket's core-stage development so far.

Read 7 remaining paragraphs | Comments

Never-before-seen virus may be behind mystery outbreak in China

Investigators have already ruled out SARS and other obvious culprits, officials say.

A purple background with 5 large, round, pink viral particles, each surrounded by a corona

Enlarge / Colored image of coronaviruses made from a transmission electron microscopy. (credit: Getty | BSIP)

A mysterious outbreak of viral pneumonia linked to a wild-animal market in the Chinese city of Wuhan may be caused by a never-before-seen virus, according to preliminary reports.

Officials in neighboring areas, meanwhile, are screening travelers for symptoms and planning quarantine zones to try to prevent any potential spread of the mystery disease.

As of Sunday, January 5, Wuhan Municipal Health Commission reported a total of 59 cases, including seven critically ill patients. There have been no reported deaths.

Read 14 remaining paragraphs | Comments

Akasa introduces Venom QX case for Intel NUC 9 Compute Element

PC accessory maker Akasa has been offering fanless NUC cases for years. Take the guts of an Intel NUC mini-computer, remove them from the original case and put them into an Akasa chassis and you have a small, silent, passively-cooled PC. Now Akasa is i…

PC accessory maker Akasa has been offering fanless NUC cases for years. Take the guts of an Intel NUC mini-computer, remove them from the original case and put them into an Akasa chassis and you have a small, silent, passively-cooled PC. Now Akasa is introducing its first actively-cooled NUC case. It’s compatible with Intel’s new NUC […]

The post Akasa introduces Venom QX case for Intel NUC 9 Compute Element appeared first on Liliputing.

NYC broadband plan calls for fiber everywhere, with ISPs sharing network

City will invest in network, but success depends heavily on private ISPs.

An image of New York City skyscrapers, overlaid with lines meant to represent a broadband network.

Enlarge / New York City. (credit: Getty Images | Busakorn Pongparnit)

The New York City government has released an "Internet Master Plan" that calls for universal broadband throughout the five boroughs, relying on open-access fiber networks that can be used by multiple ISPs.

The plan, announced by Mayor Bill de Blasio and Chief Technology Officer John Paul Farmer yesterday, says New York City "will prioritize and optimize 'open-access' or 'neutral-host' infrastructure, which can be shared by multiple operators to lower costs, increase competition, minimize physical disruption to the city, and incentivize private-sector investments to reach and serve customers." New York City wants to ensure universal access to both wired and mobile Internet, with a fiber network that offers home Internet and provides bandwidth to mobile services.

The plan continues:

Read 17 remaining paragraphs | Comments

Asus brings Ice Lake, Comet Lake chips to its 2020 VivoBook lineup

PC maker Asus only brought one new premium ZenBook thin and light laptop to the Consumer Electronics Show this year. But the company is adding a bunch of new models to its mid-range VivoBook lineup. They’re all powered by 10th-gen Intel Core proc…

PC maker Asus only brought one new premium ZenBook thin and light laptop to the Consumer Electronics Show this year. But the company is adding a bunch of new models to its mid-range VivoBook lineup. They’re all powered by 10th-gen Intel Core processors, and many will be available with optional NVIDIA graphics. Here’s an overview […]

The post Asus brings Ice Lake, Comet Lake chips to its 2020 VivoBook lineup appeared first on Liliputing.

Faltbares Smartphone: Samsung hat bis zu 500.000 Galaxy Fold verkauft

Nach einer ersten Falschmeldung zu den Absatzzahlen des Galaxy Fold hat Samsungs Mobile-Chef Koh Dong-jin neue Zahlen geliefert: Der Hersteller hat eigenen Angaben zufolge zwischen 400.000 und 500.000 Galaxy Fold verkauft. (Galaxy Fold, Smartphone)

Nach einer ersten Falschmeldung zu den Absatzzahlen des Galaxy Fold hat Samsungs Mobile-Chef Koh Dong-jin neue Zahlen geliefert: Der Hersteller hat eigenen Angaben zufolge zwischen 400.000 und 500.000 Galaxy Fold verkauft. (Galaxy Fold, Smartphone)

No, cops aren’t using SiriusXM to find criminals. Here’s how they do it

Reports that police use a “Sirius radio” to find someone are usually half right.

Heavily modified photograph of jeep driving across desert terrain.

Enlarge (credit: Aurich Lawson / Getty Images)

An Ars reader this week drew our attention to a news story out of Southern California. The case involved a man wanted on suspicion of attempted murder and other alleged crimes. He fled from one county to another, but according to the article, sheriff's deputies were able to locate him by "sending a 'ping' to his Sirius satellite radio," after which the suspect was found and arrested.

The mysterious "ping" grabbed the reader's attention, as well as several Ars staffers: what, exactly, did law enforcement do? How did it work? And what are the implications for everyone driving around with a SiriusXM satellite radio in their car?

The case

A representative for Sirius was unable to say if the company was involved in any specific way in this particular case or even if the case did indeed involve an actual Sirius product. Whatever happened, calling it a "Sirius radio ping" was probably a misnomer, the company told Ars, as Sirius satellite radio itself is a one-way operation. The actual radios have no geo-locating capacity and can't "ping" anything back to anyone.

Read 10 remaining paragraphs | Comments

Manga Publisher Takeshobo Sues Cloudflare For Copyright Infringement

Major Japanese publisher Takeshobo has sued Cloudflare in a Tokyo court for alleged copyright infringement. The publisher says it was forced into the action after requests to remove content being offered by a Cloudflare customer were ignored. Takeshobo is taking care not to mention the name of the ‘pirate’ site in question but TorrentFreak has uncovered a DMCA subpoena from 2019 which may shine some light on proceedings.

Source: TF, for the latest info on copyright, file-sharing, torrent sites and more. We also have VPN reviews, discounts, offers and coupons.

Founded in 1972, Takeshobo is major publisher based in Japan. The company distributes dozens of manga publications on monthly schedules, many under the Bamboo Comics label.

On Tuesday the company revealed that it had taken legal action to protect its titles being made available online by pirate sites. However, in common with an increasing number of companies in multiple spaces, its lawyers are going after Cloudflare.

Takeshobo revealed that on December 20, 2019, it filed a civil action against the CDN company at the Tokyo District Court.

“The nature of the complaint is that Cloudflare, Inc. provides a server to an illegal site where many copyrighted works, including those published by us, are illegally uploaded and made available for free,” a statement from Takeshobo reads.

“We asked directly to remove the uploaded copyrighted material from the company’s server, but because no action was taken, we requested the court to remove the copyright infringing page and pay damages.”

Since no court documents have yet been made available to the public and the publisher refers only to “an illegal site”, there’s no absolute confirmation of which ‘pirate’ site Takeshobo is referencing. The company does state, however, that “an order based on copyright infringement has been issued at a District Court in the United States.”

Another possible pointer can be found in Takeshobo’s statement, which further indicates that the legal case against Cloudflare in Japan was filed in collaboration with Mr. Hanamura, one of the authors of the ‘Dorukara’ comic distributed by the company.

With this information in hand, TorrentFreak was able to trace court documents filed in the United States during July 2019, which reveal Takeshobo asking Cloudflare to take action against various ‘pirate’ sites using its services, including those making the ‘Dorukara’ publication available to the public.

“Takeshobo Inc. is seeking a subpoena pursuant to 17 U.S.C. § 512(h) to obtain information sufficient to identify the persons infringing its copyrighted works,” an application for a DMCA subpoena filed at a district court in California reads.

“The purpose for which this subpoena is sought is to obtain the identity of the alleged infringers. Such information will only be used for the purpose of protecting rights
under the Copyright Act (17 U.S.C. § 101, et seq.).”

Domains belonging to several ‘pirate’ sites are listed in the subpoena against Cloudflare – Hoshinoromi.org, Worldjobproject.org, Hanascan.com, Mangahato.com, and Manatiki.com.

Readers will recall that Hoshinoromi.org was presented by some as a ‘successor’ to the previously shuttered Mangamura platform, which at the time was considered one of the largest infringers of manga publishers’ copyrights.

However, after being sued last September at a federal court in New York by publishers Shueisha, Kadowaka, Kodansha, and Shogakukan, Hoshinoromi.org and the related
Worldjobproject.org shut down.

That leaves Hanascan.com, Mangahato.com, and Manatiki.com, all of which are operating today. Manatiki is clearly the smallest player, pulling in around 327,000 visits per month according to SimilarWeb stats. Hanascan is considerably larger with around 3.2 million visits per month but Mangahato is in a clear lead with around 3.5 million.

An image presented as part of the DMCA subpoena application last year shows all three domains allegedly carrying ‘Dolkara’ content, which according to MyAnimeList is an alternative title for ‘Dorukara’.

Another curiosity can be found in the URLs highlighted above. Domain names aside, the URLs listed for all three sites are identical in construction and present content in more or less the same format.

We can also confirm that all of the content remains in place, via Cloudflare’s services, despite demands in Takeshobo’s DMCA subpoena to “remove or disable” the allegedly infringing works from the listed domains.

Whether Takeshobo is targeting one, all, or indeed none of these domains remains a question but it is crystal clear that Cloudflare did not remove or disable access to any of the above content as the earlier DMCA subpoena demanded.

Whether that dispute is also part of the lawsuit now underway in Tokyo against Cloudflare is still unconfirmed but the pieces seem to point in that direction.

The documents supporting the application for a DMCA subpoena, which was signed off by the court last year, are available here and here (pdf)

Source: TF, for the latest info on copyright, file-sharing, torrent sites and more. We also have VPN reviews, discounts, offers and coupons.