Amazon Fire OS 6 brings Android 7.1 Nougat to its 2017 Fire tablets

Amazon’s Fire tablets run a custom version of Android called Fire OS… and while the company releases small software updates from time to time, it’s rare for one of Amazon’s budget tablets to get a major OS bump. But that’s…

Amazon’s Fire tablets run a custom version of Android called Fire OS… and while the company releases small software updates from time to time, it’s rare for one of Amazon’s budget tablets to get a major OS bump. But that’s just what happened recently. When the 7th-gen Amazon Fire, Fire HD 8 and Fire HD 10 […]

Attackers exploit 0-day code-execution flaw in the Sophos firewall

Yep, in-the-wild SQL injection exploits in 2020 are still a thing.

A gaping hole in a brick wall.

Enlarge (credit: Rae Allen / Flickr)

Users of a widely used firewall from Sophos have been under a zero-day attack that was designed to steal usernames, cryptographically protected passwords, and other sensitive data, officials with the security firm said on Sunday.

The well-researched and developed attack exploited a SQL injection flaw in fully patched versions of the Sophos XG Firewall. With that toehold in systems, it downloaded and installed a series of scripts that ultimately executed code intended to make off with users’ names, usernames, the cryptographically hashed form of the passwords, and the salted SHA256 hash of the administrator account’s password. Sophos has delivered a hotfix that mitigates the vulnerability.

Other data targeted by the attack included a list of the IP address allocation permissions for firewall users; the version of the custom operating system running; the type of CPU; the amount of memory that was present on the device; how long it had been running since the last reboot; and the output of the ifconfig, a command-line tool; and ARP tables used to translate IP addresses into domain names.

Read 6 remaining paragraphs | Comments

Ajit Pai uses bad data to claim ISPs are deploying broadband to everyone

Pai’s “baffling” report ignores broadband gaps and high prices, Democrats say.

FCC Chairman Ajit Pai.

Enlarge / FCC Chairman Ajit Pai speaking at a press conference on October 1, 2018, in Washington, DC. (credit: Getty Images | Mark Wilson )

The Federal Communications Commission on Friday issued its annual broadband deployment report, finding for the third straight year that broadband is "being deployed to all Americans in a reasonable and timely fashion."

The FCC is required to report on broadband progress annually under Section 706 of the Telecommunications Act of 1996. Pai's Republican majority pointed to the FCC's deployment data to argue that broadband networks are expanding fast enough to serve all Americans, despite the three biggest ISPs—Comcast, AT&T, and Charter—lowering capital expenditures.

Pai's conclusion is based on ISPs' filings to the FCC, which are known to overcount the number of Americans who have broadband access. The FCC report also failed to consider whether data caps and broadband prices are impeding progress toward universal broadband access.

Read 27 remaining paragraphs | Comments

We’ve found the world’s worst coworker, and here’s what they do

No, you should NOT cc the CEO on every email you send.

Young businesswoman having fun while pretending to be a clown on a meeting in the office. The view is through glass.

Enlarge / Does every organization have one of them? (credit: Getty Images)

You know it's bad when Senior Technology Editor Lee Hutchinson messages you on slack and says "hey check out this Reddit thread." Since the alternative was finishing the transcription of an interview, I did indeed check out that Reddit thread. Oh boy. Posted in r/AmItheAsshole—protip, if you have to ask, the answer is usually yes—the thread centers around the tardy replies this fellow receives to the emails he sends out. His solution? Simple: he now cc's the company CEO on any email that goes to a coworker he thinks might not respond the instant it hits their inbox.

"Ahh," you might be thinking. "At a small mom-and-pop shop, that's a little annoying but probably OK, because everyone knows everyone." Well, think again dear reader, for this fine human being has decided to implement his one-man "email the big boss" policy at a company with more than 10,000 employees.

Part of his problem, it seems, is a general contempt for fellow employees who work in IT:

Read 5 remaining paragraphs | Comments

Qualcomm introduces Quick Charge 3+ (faster charging via USB-A cables)

Qualcomm is rolling out an update to its Quick Charge technology that the company says will bring fast charging support to cheaper devices. Quick Charge 3+ is supposed to be just as fast as Quick Charge 4+, but it works with power adapters that use USB…

Qualcomm is rolling out an update to its Quick Charge technology that the company says will bring fast charging support to cheaper devices. Quick Charge 3+ is supposed to be just as fast as Quick Charge 4+, but it works with power adapters that use USB Type-A to Type-C cables, which are still more affordable […]

After prolonged service outage, Petnet shuts down, citing coronavirus

The COVID-19 crisis may just be the last nail in the coffin for the company.

You're just going to have to feed this baleful furry friend the old-fashioned way. Before his sad eyes scour your soul.

Enlarge / You're just going to have to feed this baleful furry friend the old-fashioned way. Before his sad eyes scour your soul. (credit: Petnet)

Cloud-connected, "smart" automated pet-feeder system Petnet has had a rough spring. The service not only went offline in February, but all its customer service vanished, too, leaving users in the dark until the company apologized and pushed a patch more than a week later. The service briefly returned for some users, but fell off again in March. Now, after weeks of silence, the company is blaming COVID-19 for driving it offline for good—even though its problems started weeks or months before the novel coronavirus became a significant concern.

Several Petnet customers began reaching out to Ars during the second and third weeks of April to report that, once again, not only were their feeders not working, but also they couldn't reach anyone at Petnet about it. Everyone's feeders didn't go offline at the same time but seemed to fail in slow sequence over the period between March 26 and April 13.

The company emailed its customers on March 26 blaming the novel coronavirus for outages and delays. The message, titled, "Petnet: Impact of COVID-19," read:

Read 11 remaining paragraphs | Comments

Lenovo is joining Dell in the “OEM Linux Laptop” club

Several Thinkpad models will join the Dell XPS 13 DE in Linux-land this year.

Promotional image of laptop computer.

Enlarge / You'll be able to buy a Thinkpad X1 Carbon with pre-installed and factory-supported Fedora Workstation 32 later this year. (credit: Lenovo)

It looks like Lenovo may upstage Dell as the big name in OEM Linux laptops—not counting specialty retailers like System76, of course. Red Hat and Lenovo are announcing pre-installed and factory-supported Fedora Workstation on several models of ThinkPad laptops at Red Hat Summit this week.

Dell's Linux support has generally been limited to one or two very specific laptops—first, the old Atom-powered netbooks and, more recently, the XPS 13 Developer Edition line. Lenovo is planning a significantly broader Linux footprint in its lineup.

Jakub Steiner produced a short video stinger for the Lenovo news, to be used at Red Hat Summit.

Fedora Workstation will be a selectable option during purchase for the Thinkpad P1 Gen2, Thinkpad P53, and Thinkpad X1 Gen8 laptops—and Lenovo may offer even broader model support in the future. Lenovo Senior Linux Developer Mark Pearson, who will be the featured guest in the May 2020 Fedora Council Video Meeting, expresses the company's stance on forthcoming integration:

Read 3 remaining paragraphs | Comments

Daily Deals (4-27-2020)

Daily Steals has one of the best deals I’ve seen recently for a set of over-ear, noise-cancelling headphones in a while — you can pickup a set of JBL Tune 600 BTNC wireless on-ear noise-cancelling headphones for $70. Meanwhile, amazon is of…

Daily Steals has one of the best deals I’ve seen recently for a set of over-ear, noise-cancelling headphones in a while — you can pickup a set of JBL Tune 600 BTNC wireless on-ear noise-cancelling headphones for $70. Meanwhile, amazon is offering Bose 700 noise-cancelling headphones for $100 off their list price, and JBL is […]

Telegram Piracy Channels Face Blocking After Italian Prosecutor Issues Emergency Order

An emergency order signed by a deputy prosecutor in Italy has been delivered to local telecoms watchdog AGCOM. It requires Telegram to shut down 19 channels involved in the illegal distribution of newspapers, periodicals and books. In the event the chat platform fails to cooperate, ISPs could be required to block the channels or, in the extreme, block Telegram completely.

From: TF, for the latest news on copyright battles, torrent sites and more. We also have an annual VPN review.

Instant messenging platform Telegram has an estimated 400 million users who use the service to communicate on an limitless number of topics. It is also used for piracy purposes, which has resulted in criticism from copyright holders.

In Italy, significant pressure has been building following complaints from the Federation of Newspaper Publishers (FIEG). According to the association, a sample of 10 Telegram channels, that are specifically used for the illicit distribution of newspapers, have around 580,000 users obtaining copyrighted content without permission.

“The estimate of the losses suffered by publishing companies is alarming,” FIEG President Andrea Riffeser Monti complained earlier this month.

“In a highly conservative hypothesis, we estimate €670 thousand per day, approximately €250 million per year: a figure which I trust that the sector authority wants to intervene against firmly and promptly.”

In light of soaring illicit consumption during the coronavirus pandemic, FIEG said that it had asked local telecoms watchdog AGCOM, which has site-blocking powers, to take “exemplary and urgent measures” against Telegram, which stands accused of not doing enough to tackle piracy. It is a position supported by the European Newspaper Publishers’ Association (ENPA).

“We asked AGCOM for an exemplary measure because we think that the authority has this power but it also has a duty: one cannot witness a daily illegal act, the circulation of copies of newspapers fraudulently,” ENPA President Carlo Perrone told local media this month.

“It is a lack of respect for the work of thousands of serious journalists as well as restricting citizens’ rights to be informed.”

The problem is complex, however. Telegram is based in Russia where even the Russian government, with all its determination, hasn’t been able to block Telegram effectively. Nevertheless, the Italian publishers have been pushing ahead, demanding an intervention in proportion to the economic damages their members are said to be suffering.

Late last week, in response to building pressure from the publishers, AGCOM said it had examined an application from FIEG which demanded that either all pirated copies of its members’ works should be removed from Telegram channels or the platform should be completely blocked. According to AGCOM, it entered into urgent discussion with Telegram which resulted in the platform deleting seven of the eight channels initially reported by FIEG.

The announcement came with words of caution, however. While reiterating that it is committed to protecting copyrights, AGCOM clarified that its interventions can only take place within the limits of relevant local regulations. When violations take place overseas, matters become more complex.

“When the violation occurs on the channels of a site located outside the national territory, as in the case of Telegram, the Authority can only turn to the Italian providers that provide internet access, ordering them to proceed to disable access to the entire site. It is not possible to order selective removal of only illegal content, as this would involve the use of filtering techniques that the Court of European justice has found incompatible with Union law,” AGCOM wrote.

“In the current state of legislation, a possible indiscriminate blocking measure of access to all Telegram channels – such as the one requested by the FIEG – appears to lack the necessary requirement.”

A key factor here is that AGCOM acts as a regulator and as such has limited powers. The Postal and Communications Police and the Guardia di Finanza law enforcement agency, on the other hand, can pursue cases more aggressively. So, while expressing “satisfaction” at the closure of the seven Telegram channels, FIEG said it would also be using those law enforcement avenues to protect its members’ rights.

This morning it became evident that the screw was being tightened further. According to a report from La Repubblica, officers of the Economic and Financial Police Unit of the Guardia di Finanza of Bari arrived at AGCOM’s headquarters in Rome to notify the agency of an unprecedented “emergency preventative seizure order” signed by Deputy Prosecutor Roberto Rossi. This, the publication said, “marked a point of no return in the war on piracy.”

The prosecutor’s case centers around complaints to Telegram over a series of copyright infringement offenses committed by yet-to-be-identified individuals.

“They distributed, transmitted and disseminated in PDF format, magazines, newspapers and books (copyright protected assets), after having illegally acquired them through abusive access to the computer system (or in any case with illegal subtraction from legitimate holders), tens of thousands of files,” the report reads.

In tandem are allegations that alongside the copyright infringement offenses, money laundering is taking place, a crime that can result in a sentence of up to 12 years. the Bari prosecutor’s office states that Telegram has never wanted to assist in identifying the offenders nor disable access to their channels.

As a result, the financial police have been given a mandate to close 19 Telegram channels said to be involved in mass infringement of various publications’ copyrights. However, in the event that Telegram fails to cooperate, local Internet service providers could be required to block access to the channels or, if that is not possible, the entire Telegram service in Italy.

From: TF, for the latest news on copyright battles, torrent sites and more. We also have an annual VPN review.