Feds issue emergency order for agencies to patch critical Windows flaw

Agencies that don’t update must disconnect all domain controllers from networks.

Close-up photograph of computer networking components.

Enlarge (credit: Sebastian Kahnert/picture alliance via Getty Images)

The US Department of Homeland Security is giving federal agencies until midnight on Tuesday to patch a critical Windows vulnerability that can make it easy for attackers to become all-powerful administrators with free rein to create accounts, infect an entire network with malware, and carry out similarly disastrous actions.

Zerologon, as researchers have dubbed the vulnerability, allows malicious hackers to instantly gain unauthorized control of the Active Directory. An Active Directory stores data relating to users and computers that are authorized to use email, file sharing, and other sensitive services inside large organizations. Zerologon is tracked as CVE-2020-1472. Microsoft published a patch last Tuesday.

An unacceptable risk

The flaw, which is present in all supported Windows server versions, carries a critical severity rating from Microsoft as well as a maximum of 10 under the Common Vulnerability Scoring System. Further raising that stakes was the release by multiple researchers of proof-of-concept exploit code that could provide a roadmap for malicious hackers to create working attacks.

Read 9 remaining paragraphs | Comments

Nawalny: Wurde das Video über den Fund der Wasserflasche im Hotel in Tomsk inszeniert?

Die gut sichtbare Zeit auf einem Wecker stimmt augenscheinlich nicht mit der Uhrzeit auf Armbanduhren von Nawaly-Mitarbeiter überein. Jetzt verlangt Nawalny seine Kleidung als Beweismittel zurück. Neue Seltsamkeiten …

Die gut sichtbare Zeit auf einem Wecker stimmt augenscheinlich nicht mit der Uhrzeit auf Armbanduhren von Nawaly-Mitarbeiter überein. Jetzt verlangt Nawalny seine Kleidung als Beweismittel zurück. Neue Seltsamkeiten …

Klare Kante an falscher Stelle: inhumanes Österreich?

Dass sich Österreich an der Aufnahme einer kleinen Zahl von Schutzbedürftigen aus Lesbos, unter diesen zahlreiche Kinder, nicht beteiligt, passt so gar nicht in das Bild des gemütlichen kleinen Nachbarn. Passt es doch. Denn im freundlichen Kleinstaat i…

Dass sich Österreich an der Aufnahme einer kleinen Zahl von Schutzbedürftigen aus Lesbos, unter diesen zahlreiche Kinder, nicht beteiligt, passt so gar nicht in das Bild des gemütlichen kleinen Nachbarn. Passt es doch. Denn im freundlichen Kleinstaat im Herzen Europas herrscht Wahlkampf

T-Mobile amassed “unprecedented concentration of spectrum,” AT&T complains

T-Mobile rivals say it has too much spectrum, urge FCC to impose limits.

A bird sits on top of a T-Mobile sign outside a mobile phone store,

Enlarge / A pigeon rests on a T-Mobile logo outside a mobile phone store, operated by Deutsche Telekom AG, in Munich, Germany, on Monday, Feb. 6, 2017. (credit: Getty Images | Bloomberg)

AT&T and Verizon are worried about T-Mobile's vast spectrum holdings and have asked the Federal Communications Commission to impose limits on the carrier's ability to obtain more spectrum licenses. Verizon kicked things off in August when it petitioned the FCC to reconsider its acceptance of a new lease that would give T-Mobile another 10MHz to 30MHz of spectrum in the 600MHz band in 204 counties. AT&T followed that up on Friday with a filing that supports many of the points made in Verizon's petition.

T-Mobile was once the smallest of four national carriers and complained that it didn't have enough low-band spectrum to match AT&T and Verizon's superior coverage. But T-Mobile surged past Sprint in recent years and then bought the company, making T-Mobile one of three big nationwide carriers along with AT&T and Verizon. T-Mobile also bolstered its low-band spectrum holdings by dominating a 600MHz auction in 2017.

"The combination of Sprint and T-Mobile has resulted in an unprecedented concentration of spectrum in the hands of one carrier," AT&T wrote in its filing to the FCC on Friday. "In fact, the combined company exceeds the Commission's spectrum screen, often by a wide margin, in Cellular Market Areas representing 82 percent of the US population, including all major markets."

Read 8 remaining paragraphs | Comments

Nintendo Hits XXX-Rated ‘Peach’s Unknown Tale’ Game With Copyright Complaint

The words Nintendo and pornography can only ever be seen together when the former is trying to distance itself from the latter. That’s the case today after Nintendo’s lawyers filed a DMCA takedown notice against a game called Peach’s Untold Tale. It depicts the princess and many other Nintendo characters having fun in many ways that are completely unacceptable to the gaming giant.

From: TF, for the latest news on copyright battles, piracy and more.

peachOver the past several years it has become increasingly apparent that Nintendo isn’t prepared to tolerate instances where its copyright or trademark rights may have been breached by third parties.

Many of Nintendo’s responses are fairly straightforward, targeting platforms that offer Nintendo games without permission or those that provide tools, software and workarounds that undermine protection mechanisms designed to prevent copying.

Some, however, don’t fall neatly into any of these categories.

Peach’s Untold Tale

Early 2012, South America-based developer Ivan Aedler posted to the Legend of Krystal forums revealing a new project titled Peach’s Untold Tales (PUT). It’s billed as a freeware adult parody game that documents the ‘adventures’ of the Shigeru Miyamoto character Princess Peach, who was first seen in Super Mario Bros. way back in 1985.

The title can be best explained as being ‘hentai’ in style which, according to a dictionary definition, is a subgenre of the Japanese genres of manga and anime characterized by overtly sexualized characters and sexually explicit images and plots. Without stepping into XXX territory, it’s perhaps best to quote from an interview Aedler gave in 2019 in which he revealed the premise.

“It’s a game where players take on the role of Princess Peach. Bowser is invading, the citizens of Mushroom Kingdom are under Kamek’s spell to be super aroused, and Mario is missing. What’s a princess to do? Stomp some enemies, or start putting out, to save her kingdom,” he told Doujins.

After Eight Years, Nintendo Has Seen Enough

Finding a relevant screenshot to display without needing some element of censorship to accommodate younger readers proved pretty fruitless, so those interested in viewing some of PUT’s gameplay can do so on Xvideos.com, where just one video of the game in action has more than two million views (NSFW).

Needless to say, the acts witnessed are not something one would normally associate with Nintendo products or characters. It will come as no surprise then after either waiting eight years or perhaps just discovering the game for the first time, Nintendo has ordered its legal team into action.

PUT made Microsoft-owned Github its development home but in a DMCA notice served on the platform late last week, the gaming giant explained that PUT infringes the copyrights of its Super Mario video game franchise.

Listing a range of copyright registrations covering Peach, Toad, Mario is Missing, Super Mario Maker, Super Mario Bors., Super Mario Kart and Super Smash Bros. Brawl, to name just a few, the company demanded the takedown of the entire project including its Github.io webpage and Github.com download pages.

Aren’t Parodies Covered By Fair Use?

Anyone familiar with the adult industry will be only too aware that porn parodies are widespread and are carefully crafted so as to take full advantage of the relevant exception in copyright law. In this case, however, Nintendo doesn’t feel that exception is available.

In its takedown notice filed with Github, Nintendo said it had considered all fair use exceptions but after a review, ultimately found that it “does not believe [PUT] qualifies as a fair use of Nintendo’s copyright-protected work.”

According to intellectual property attorney Maxine Lynn, who in 2018 published a piece on XBIZ covering the legality of porn parodies, the evaluation of whether use is fair is made on a case-by-case basis, balancing the rights of authors and the free speech rights of the public.

A close example to the case in hand appears to lie in the 1978 case of Walt Disney Productions v. Air Pirates. After the latter produced a comic book featuring 17 Disney characters including Mickey Mouse involved in sex and drugs, Disney sued and the court found that the use was not fair.

“The U.S. Ninth Circuit Court found that the amount of the portion copied exceeded permissible levels, noting that, ‘[w]hen persons are parodying a copyrighted work, the constraints of the existing precedent do not permit them to take as much of a component part as they need to make the ‘best parody.’ Instead, their desire to make the ‘best parody’ is balanced against the rights of the copyright owner in his original expressions,” Lynn wrote, citing the decision.

The important position that remains unchanged today is that such fair use cases can be both complex and expensive to defend. With that in mind, it seems unlikely that developer Ivan Aedler will contest the DMCA takedown filed by Nintendo, since that puts the company in the position of having to file a lawsuit against him to prevent Peach’s Untold Tale from being reinstated on Github.

At the time of writing, Aedler had not responded to TorrentFreak’s request for comment.

From: TF, for the latest news on copyright battles, piracy and more.

Everyone loves the new couple on the block in first Wandavision trailer

It’s set after Endgame, will tie in with Doctor Strange in the Multiverse of Madness.

Elizabeth Olsen and Paul Bettany reprise their roles as Wanda Maximoff/Scarlet Witch and Vision, respectively, in Marvel’s spinoff series WandaVision.

If you were watching the virtual 72nd Primetime Emmy Awards last night, you no doubt caught the debut of a new trailer for WandaVision, the first standalone series to be released in Phase Four of the MCU. The studio offered a sneak peek last year during D23 Expo 2019, Disney's annual fan extravaganza. Lacking any actual footage, that teaser was just snippets of The Dick van Dyke Show interspersed with snippets of the Scarlet Witch (Elizabeth Olsen) and Vision (Paul Bettany) from the various MCU films. At the time, I was skeptical of the concept, but this new trailer is quite promising and gives me hope that Marvel can pull it off.

WandaVision is meant to be a kind of sitcom/epic superhero mashup, with Kat Dennings reprising her role as Darcy from the Thor films, alongside Randall Park reprising his Ant Man and the Wasp role as FBI agent Jimmy Woo. Kathryn Hahn (Crossing Jordan) will play a "nosy neighbor," and Teyonah Parris (Mad Men) plays a grown-up Monica Rambeau, daughter of Carol Danvers' BFF Maria Rambeau, introduced in Captain Marvel. Within the MCU timeline, it takes place after the events of Avengers: Endgame, and its events will directly tie in to Doctor Strange in the Multiverse of Madness, currently slated for a 2022 release. 

Per the official description: "WandaVision will follow the story of Elizabeth Olsen and Paul Bettany's superhero characters, the Scarlet Witch and Vision. The series is a blend of classic television and the Marvel Cinematic Universe in which Wanda Maximoff and Vision—two super-powered beings living idealized suburban lives—begin to suspect that everything is not as it seems."

Read 4 remaining paragraphs | Comments

Everything we know so far about Oracle not actually buying TikTok

In which we try to answer questions such as: “What the actual heck is going on?”

A casually dressed young woman shrugs while holding the logos of two competing companies.

Enlarge / ¯\_(ツ)_/¯ (credit: Aurich Lawson / Getty Images)

It was a weird weekend to end a weird summer for one of the country's most poular social media apps, TikTok. First, in August, the Trump administration threatened to ban TikTok unless it found a US buyer. Then last weekend, one-time dark horse Oracle emerged victorious in a federally mandated contest to acquire TikTok. Except, it turns out, Oracle isn't actually acquiring TikTok at all—and Oracle and TikTok's current parent company, ByteDance, disagree on who is going to be in charge.

If you're confused, you're in good company. Here's our attempt to lay out everything we know about TikTok, Oracle, and their mysterious deal so far.

What is TikTok? Who owns it?

TikTok is an extremely popular short-form video app used worldwide. The app appeared in its current incarnation after its parent company, Beijing-based ByteDance, acquired US startup Musical.ly in 2017 and integrated it with its existing TikTok product under the TikTok name.

Read 36 remaining paragraphs | Comments

Lilbits: Amazon Sidewalk, Microsoft buys Bethesda, and game streaming on Linux

Amazon is diving deeper into the connected home space… by preparing to move just outside your home. Amazon Sidewalk will use a combination of wireless technologies to let your security cameras keep sending alerts even if your WiFi is out, or let…

Amazon is diving deeper into the connected home space… by preparing to move just outside your home. Amazon Sidewalk will use a combination of wireless technologies to let your security cameras keep sending alerts even if your WiFi is out, or let your connected lights or other sensors work even if they’re beyond the range […]

The post Lilbits: Amazon Sidewalk, Microsoft buys Bethesda, and game streaming on Linux appeared first on Liliputing.

Nikola founder abruptly resigns amid fraud allegations

Nikola is reportedly under investigation by the SEC and Department of Justice.

A casually dressed man gives a presentation in front of a semitruck.

Enlarge / Nikola Chairman Trevor Milton unveils the Nikola One truck in December 2016. (credit: Nikola)

Trevor Milton, founder of electric truck startup Nikola, resigned his job as executive chairman of the company on Sunday—effective immediately. Nikola's stock plunged after the news and is currently trading at around $28 per share, which is down 18 percent.

Milton's resignation came just 10 days after a bombshell research report revealed that Milton wasn't telling the truth in 2016 when he unveiled the company's first product, the Nikola One, and claimed that it "fully functions." The report from short-selling firm Hindenburg Research also revealed that a Nikola One truck that appeared to be driving down a highway under its own power in a 2018 promotional video was actually rolling down a hill. Nikola acknowledged last week that it never got the Nikola One working.

The Hindenburg revelations put Nikola's management under immense pressure. Both the Securities and Exchange Commission and the Department of Justice have reportedly opened investigations into possible fraud by the company. Over the weekend, Milton offered (voluntarily, he says) to resign as executive chairman, and Nikola's board accepted his offer. Milton will also relinquish his seat on Nikola's board.

Read 13 remaining paragraphs | Comments