Google and Intel warn of high-severity Bluetooth security bug in Linux

Yes, it’s serious, but high severity doesn’t necessarily mean high risk.

Stylized image of a floating padlock.

Enlarge (credit: Getty Images)

Google and Intel are warning of a high-severity Bluetooth flaw in all but the most recent version of the Linux Kernel. While a Google researcher said the bug allows seamless code execution by attackers within Bluetooth range, Intel is characterizing the flaw as providing an escalation of privileges or the disclosure of information.

The flaw resides in BlueZ, the software stack that by default implements all Bluetooth core protocols and layers for Linux. Besides Linux laptops, it's used in many consumer or industrial Internet-of-things devices. It works with Linux versions 2.4.6 and later.

In search of details

So far, little is known about BleedingTooth, the name given by Google engineer Andy Nguyen, who said that a blog post will be published “soon.” A Twitter thread and a YouTube video provide the most detail and give the impression that the bug provides a reliable way for nearby attackers to execute malicious code of their choice on vulnerable Linux devices that use BlueZ for Bluetooth.

Read 9 remaining paragraphs | Comments

The 12 most popular Prime Day 2020 deals, as chosen by Ars readers

We peel back the curtain to reveal what people are actually buying on Prime Day.

sony wh-1000xm4

Enlarge / Sony's WH-1000XM4 noise-canceling headphones. (credit: Jeff Dunn)

With Amazon Prime Day comes a flood of discounts, but in truth, only a fraction of those are worth buying. So we've spent the last couple of days trying to pick out the deals most worth your attention from Amazon's self-manufactured shopping holiday.

With the event scheduled to end by tomorrow, though, we thought it'd be fun to have our final Prime Day post share the most purchased items by readers here at Ars. To be clear: we absolutely do not (and can not) track individual buying habits, but we are able to see what's received the most attention in anonymized aggregate.

Furthermore, don't take this as a scientific set of data. We've highlighted specific products as especially noteworthy within our deal roundups, with entire articles dedicated to the best Amazon device deals and the best Apple device deals. Naturally, some of the products that got the most prominent call-outs wound up among the most popular. (We appreciate your faith in our recommendations, by the way.) Without getting too deep into the minutiae of retailer affiliate networks, we'll also note that the items below are only based on Tuesday's activity.

Read 17 remaining paragraphs | Comments

Lilbits: Goodbye Yahoo Groups, hello Pixel 5 and Pixel 4a 5G, and a PSA

There’s some phone news, a farewell to an old-school internet service, and a reminder that some of the best Prime Day deals are for Amazon’s somewhat-hackable Fire tablets. But first, a public service announcement. If you live in the Unite…

There’s some phone news, a farewell to an old-school internet service, and a reminder that some of the best Prime Day deals are for Amazon’s somewhat-hackable Fire tablets. But first, a public service announcement. If you live in the United States, you have until October 15 to fill out the 2020 Census. That date has […]

The post Lilbits: Goodbye Yahoo Groups, hello Pixel 5 and Pixel 4a 5G, and a PSA appeared first on Liliputing.

The iPhone and iPad Spotify app now includes home screen widgets

Users may welcome the widget, but it doesn’t do as much as some might hope for.

Spotify—one of Apple's main rivals in both the latter's services strategy and in antitrust investigations—has released a new version of its iPhone app that supports home screen widgets, one of the flagship features of iOS 14.

Last month's release of iOS 14 brought home screen widgets—previously only the domain of iPads and Android phones—to iPhones. As we noted in our iOS 14 review, the value of the feature depends entirely on strong adoption and clever uses by third-party app developers.

Releases of widget-supporting apps from developers have been slow. Part of that was because Apple launched iOS 14 with less notice to developers than usual, meaning many were racing to play catch-up. But even now, a month later, the roster of widget-supporting apps has only grown a little.

Read 7 remaining paragraphs | Comments

Italian Court Orders Cloudflare to Block a Pirate IPTV Service

An Italian court has ordered Cloudflare to block current and future domain names and IP-addresses of the pirate IPTV service “IPTV THE BEST.” The order, which follows a complaint from the football league Serie A and Sky Italy, is the first of its kind in the country. Cloudflare put up a strong defense, arguing that it merely passes on traffic, but that didn’t convince the court.

From: TF, for the latest news on copyright battles, piracy and more.

In recent years, many copyright holders have complained that Cloudflare does little to nothing to stop pirate sites from using its services.

The US-based company receives numerous DMCA notices but aside from forwarding these to the affected customers, it takes no action.

Cloudflare sees itself as a neutral intermediary that simply passes on bits. This approach is not welcomed by everyone and, as a result, the company has been placed on the EU piracy watchlist alongside familiar pirate sites such as The Pirate Bay, Seasonvar and Rapidgator.

Despite this callout, Cloudflare maintains its position. The company doesn’t want to intervene based on allegations from copyright holders and requests a court order to take action. These orders are very rare, but a few days ago the Court of Milan, Italy, set a precedent.

Sky and Serie A Sued Cloudflare

The case in question was filed by the TV platform Sky Italy and Lega Serie A, Italy’s top football league. The organizations requested a court order to stop various third-party intermediaries from providing access to “IPTV THE BEST”, a popular IPTV service targeted at an Italian audience.

Since the IPTV service is a Cloudflare customer the US-based CDN provider was also sued. The copyright holders demanded Cloudflare and several other companies including hosting provider OVH, and ISPs such as Vodafone, TIM, Fastweb, Wind and Tiscali, to stop working with the pirate service.

Last September, the Court of Milan sided with Sky and Serie A. It issued a preliminary injunction ordering the companies to stop working with the IPTV provider, regardless of the domain name or IP-address it uses.

Cloudflare objected to the claim. In its defense, the company pointed out that it isn’t hosting any infringing content. As a CDN, it simply caches content and relays traffic, nothing more. In addition, the Italian court would lack jurisdiction as well, the company argued.

Cloudflare’s Defense Falls Flat

Despite the fierce defense from Cloudflare, which extended the case by more than a year, the court didn’t change its position. In a recent order, it explained that it’s irrelevant whether a company hosts files or merely caches the content. In both cases, it helps to facilitate copyright-infringing activity.

This is an important decision because services like Cloudflare are hard to classify under EU law, which makes a general distinction between hosting providers and mere conduit services. The Italian court clarified that such classification is irrelevant in this matter.

“The ruling is unique in its kind because it expressly addresses the issue of the provision of information society services that are difficult to classify in the types outlined by the European eCommerce Directive,” attorney Alessandro La Rosa informs TorrentFreak.

Together with Mr. Bruno Ghirardi, his colleague at the law firm Studio Previti, La Rosa represented the football league in this matter. They worked in tandem with attorney Simona Lavagnini, who represented Sky Italy.

‘Unique and Important Ruling’

Lavagnini tells us that the ruling is important because it’s the first blocking order to be issued against a CDN provider in Italy.

“The order is important because, at least to my knowledge, it is the first issued against a CDN, in which the CDN was ordered to cease the activities carried out in relation to illegal services, also including those activities which cannot qualify as hosting activities,” she says.

“The recent order clearly says that the services of the CDN shall be inhibited because they help to allow third parties to carry out the illegal action which is the subject matter of the urgent proceeding, even if there is no data storage by the CDN,” Lavagnini adds.

TorrentFreak also reached out to Cloudflare for a comment but at the time of writing the company has yet to respond.

Cloudflare Blocking Becomes More Common

While the attorneys we spoke with highlight the uniqueness of the ruling, Cloudflare previously noted in its transparency report that it has already blocked 22 domain names in Italy following a court order. It’s not known what case the company was referring to there, but it affects 15 separate accounts.

The blocking actions will only affect Italians but in theory, they could expand. There are grounds to apply them across Europe or even worldwide, Lavagnini tells us, but that will likely require further clarification from the court.

This isn’t the first time that Cloudflare has been ordered to block a copyright-infringing site in Europe. Earlier this year a German court ordered the company to block access to DDL-Music, or face fines and a potential prison sentence.

In Italy, the CDN provider was also required to terminate the accounts of several pirate sites last year. However, in that case, Cloudflare was seen as a hosting provider due to its “Always Online” feature. Also, that court order didn’t mention geo-blocking or blocking in general.

From: TF, for the latest news on copyright battles, piracy and more.

Milla Jovovich, Tony Jaa take on vicious creatures in Monster Hunter trailer

Director Paul W.S. Anderson is the creative force behind the Resident Evil franchise.

Milla Jovovich plays Captain Artemis, who must battle monsters after being transported to a hidden world in Monster Hunter.

US soldiers must fight for their lives in a parallel world filed with gigantic, aggressive creatures in Monster Hunter, a forthcoming film adapted from the hugely successful global video game franchise of the same name. Die-hard fans of the games are already noting their displeasure with the trailer, which I get—let's be honest, the trailer looks a little cheesy. But the film also co-stars martial arts star Tony Jaa of the Ong-Bak franchise, which in my book makes up for a lot of sins. And director Paul W.S. Anderson was the driving creative force behind the wildly popular Resident Evil film franchise.

The Monster Hunter games are Capcom's second bestselling game series—behind the Resident Evil series—with more than 64 million units sold globally to date across all platforms. Anderson (Mortal Kombat) discovered Monster Hunter while visiting Japan in 2008, and adapting a film from the game world became his new passion project. With the hope of establishing another successful film franchise, he enlisted his own wife, Milla Jovovich (who starred in the Resident Evil films), for the lead role of Captain Natalie Artemis, a US solider who falls into the gaming world via a portal—Anderson's plot device for introducing cinema audiences to that universe.

In the Monster Hunter role-playing games, players choose a Hunter character, along with custom armor and weapons. The characters don't have intrinsic abilities, like traditional RPGs; rather, whatever abilities they have derive from the choice of weapons and armor. Those choices are basic at first, and players collect additional resources from their quests to conquer various monsters—including fashioning new assets from parts gleaned from the defeated creatures. In single-player mode, the Hunters are usually accompanied by a Felyne or sentient cat creatures known as Palicos for additional support.

Read 3 remaining paragraphs | Comments

NASA makes a significant investment in on-orbit spacecraft refueling

In-space fueling technologies enable a new paradigm for spaceflight.

If one wants to have Starships on Mars, one first has to refuel them in Earth orbit.

Enlarge / If one wants to have Starships on Mars, one first has to refuel them in Earth orbit. (credit: SpaceX)

NASA has reached an agreement with 14 US companies to develop technologies that will enable future modes of exploration in space and on the surface of the Moon. NASA says the value of these awards for "Tipping Point" technologies is more than $370 million.

With these awards, the space agency is leaning heavily into technologies related to the collection, storage, and transfer of cryogenic propellants in space. Four of the awards, totaling more than $250 million, will go to companies specifically for "cryogenic fluid management" tech demonstrations:

  • Eta Space of Merritt Island, Florida, $27 million. Small-scale flight demonstration of a complete cryogenic oxygen fluid management system. System will be the primary payload on a Rocket Lab Photon satellite and collect critical cryogenic fluid management data in orbit for nine months.
  • Lockheed Martin of Littleton, Colorado, $89.7 million. In-space demonstration mission using liquid hydrogen to test more than a dozen cryogenic fluid management technologies, positioning them for infusion into future space systems.
  • SpaceX of Hawthorne, California, $53.2 million. Large-scale flight demonstration to transfer 10 metric tons of cryogenic propellant, specifically liquid oxygen, between tanks on a Starship vehicle.
  • United Launch Alliance (ULA) of Centennial, Colorado, $86.2 million. Demonstration of a smart propulsion cryogenic system, using liquid oxygen and hydrogen, on a Vulcan Centaur upper stage. The system will test precise tank-pressure control, tank-to-tank transfer, and multiweek propellant storage.

These awards are notable because, for much of the last decade, the agency has been hesitant to invest in technologies that will enable the handling of cold propellant in space. The official reason given for this reluctance has been that the technology of creating propellant "depots," and transferring liquid hydrogen and oxygen to and from these depots, was deemed not ready for prime time. But there were political reasons as well.

Read 6 remaining paragraphs | Comments

White House informally endorses letting pandemic spread unchecked

On background, the White House says that herd immunity plan reflects its thinking.

Image of the White House.

Enlarge / Nobody from the White House went on record as supporting herd immunity. (credit: Congressional Budget Offic)

On Monday, the White House hosted a pandemic-focused call for the press "on background"—intended to provide a window into the administration's thinking, but not to provide quotes that could be attributed to any government official. During the call, the unspecified White House officials touted a document supporting the idea of herd immunity as a plan to control the pandemic, saying it reflected the administration's thinking.

The document, called the Great Barrington Declaration, was prepared by a libertarian think tank with the assistance of a handful of scientists who have been pushing the idea that COVID-19 isn't much of a threat. And it has attracted enough attention that the World Health Organization decided to address it. The result severely undercut whatever the White House intended to accomplish.

"Never in the history of public health has herd immunity been used as a strategy for responding to an outbreak, let alone a pandemic," the WHO's Tedros Adhanom Ghebreyesus said. "It's scientifically and ethically problematic."

Read 16 remaining paragraphs | Comments

OAN reporter fired from FDA appointment is still at FDA, flouting rules

Miller promoted an unapproved drug given to Trump as “like a cure.”

Emily Miller, when she was a reporter for OAN in 2016.

Enlarge / Emily Miller, when she was a reporter for OAN in 2016. (credit: YouTube)

Back in August, the Food and Drug Administration ousted Emily Miller from her role as the agency’s top spokesperson. Miller, a right-wing activist and former One America News reporter, was installed in the FDA by the White House and given the role of Assistant Commissioner for Media Affairs, a role typically held by nonpartisan civil servants. She held the post for a mere 11 days and was fired amid intense controversy after several high-profile agency missteps.

But now it appears that Miller never left the FDA. She’s still at the regulatory agency and has since been given a new—perhaps more prestigious—title. And, as before, she is causing problems for the agency.

Miller is now the Senior Advisor to the Chief of Staff at the FDA. And, as an FDA employee, she has publicly promoted an unapproved drug as being “like a cure” for COVID-19 on twitter. Her tweets support unproven and potentially dangerous statements from President Trump and may violate FDA regulations. The drug she promoted is currently being reviewed by the FDA for emergency use, raising concerns about the agency’s impartiality.

Read 7 remaining paragraphs | Comments