Rentenpolitik in Krisenzeiten

Steigerungen der Militärausgaben und Kürzungen im Sozialhaushalt – sind das schon die Vorboten auf Hochrüstungs- und Kriegshaushalte?

Steigerungen der Militärausgaben und Kürzungen im Sozialhaushalt – sind das schon die Vorboten auf Hochrüstungs- und Kriegshaushalte?

Modelleisenbahn: Schrumpf-Golems im H0-Wunderland

Hamburgs Miniatur Wunderland ist an sich schon eine Attraktion. Jetzt können sich Besucher auch noch hineinschrumpfen lassen. Wir haben es ausprobiert und waren begeistert. Ein Bericht von Werner Pluta und Martin Wolf (VR, Technologie)

Hamburgs Miniatur Wunderland ist an sich schon eine Attraktion. Jetzt können sich Besucher auch noch hineinschrumpfen lassen. Wir haben es ausprobiert und waren begeistert. Ein Bericht von Werner Pluta und Martin Wolf (VR, Technologie)

Explaining Spring4Shell: The Internet security disaster that wasn’t

Vulnerability in the Spring Java Framework is important, but it’s no Log4Shell.

Explaining Spring4Shell: The Internet security disaster that wasn’t

Enlarge (credit: Getty Images)

Hype and hyperbole were on full display this week as the security world reacted to reports of yet another Log4Shell. The vulnerability came to light in December and is arguably one of the gravest Internet threats in years. Christened Spring4Shell—the new code-execution bug in the widely used Spring Java framework—quickly set the security world on fire as researchers scrambled to assess its severity.

One of the first posts to report on the flaw was tech news site Cyber Kendra, which warned of severe damage the flaw might cause to “tonnes of applications” and “can ruin the Internet.” Almost immediately, security companies, many of them pushing snake oil, were falling all over themselves to warn of the imminent danger we would all face. And all of that before a vulnerability tracking designation or advisory from Spring maintainers was even available.

All aboard

The hype train started on Wednesday after a researcher published a proof-of-concept exploit that could remotely install a web-based remote control backdoor known as a web shell on a vulnerable system. People were understandably concerned because the vulnerability was so easy to exploit and was in a framework that powers a massive number of websites and apps.

Read 14 remaining paragraphs | Comments

NIH begins trial of COVID boosters to fight future variants

The complex trial will test six booster regimens to broaden protection.

Extreme close-up photo of a gloved hand holding a tiny jar.

Enlarge / A vial of the current Moderna COVID-19 vaccine. (credit: Getty | Ivan Romano)

Mild or not, more SARS-CoV-2 variants are inevitable. To avoid any blips in our pandemic endgame, researchers at the National Institutes of Health on Thursday announced the start of a complex Phase II clinical trial to find the best COVID-19 booster regimen to protect against variants that emerge in the wake of omicron.

"We are looking beyond the omicron variant to determine the best strategy to protect against future variants," Anthony Fauci, director of the NIH's National Institute of Allergy and Infectious Diseases, said in a statement. "This trial will help us understand if we can use prototype and variant vaccines alone or together to shift immune responses to cover existing and emerging COVID-19 variants."

Evidence so far suggests that the current vaccines—which are based on an early version of SARS-CoV-2 isolated in Wuhan, China—can muster protection against most of the variants that have swept across the globe so far. However, current vaccines have struggled against omicron, an ultratransmissible variant that is the most divergent variant yet. As such, researchers are wary that an omicron-specific vaccine alone will not generate broad protection against any future variant that may be more closely related to past variants—such as beta, a variant first detected in South Africa in 2020 suspected of being more severe than past variants, and delta, a highly transmissible variant that swept through the US before the emergence of omicron.

Read 4 remaining paragraphs | Comments

Someone made an Android phone with a Lightning port for some reason

It’s an April Fool’s joke, yes, but it’s also real.

A Lightning port on a Samsung Android phone... if you're into that.

Enlarge / A Lightning port on a Samsung Android phone... if you're into that. (credit: Exploring the Simulation (Kenny Pi) on YouTube)

We're not sure why you'd want such a thing, but someone has modified an Android phone to use Apple's Lightning port instead of the industry-standard USB-C connection.

The modification was undertaken by Ken Pillonel, who previously made waves across the Internet for a much more sensible project: bringing USB-C to an iPhone.

Pillonel's video announcing the Lightning Android phone was published on April 1, but while that tongue-in-cheek date was a conscious choice, the modification is real. Pillonel said he wanted to "balance the chaos" stirred by his unveiling of a USB-C iPhone.

Read 6 remaining paragraphs | Comments

Prolific ‘Copyright Troll’ Seeks BitTorrent Piracy Evidence From…..Netflix?

Strike 3, the most prolific ‘copyright troll’ in the United States, is suing an individual said to have pirated its movies using BitTorrent. While that is nothing out of the ordinary, the currently anonymous defendant is now in a battle to prevent Netflix and Google from handing over masses of personal data that the adult movie company somehow claims is relevant to its case.

From: TF, for the latest news on copyright battles, piracy and more.

Netflix logoCompanies that file hundreds even thousands of copyright infringement lawsuits with the intention of seeking settlements to avoid trial, are often labeled ‘copyright trolls’.

In the United States, the undisputed leader in this space is adult video company Strike 3 Holdings, the owner of brands including Blacked, Tushy, and Vixen. In 2021 alone the company filed over 1,900 such lawsuits in U.S. courts but as far as we’re aware, not a single case has ever gone to trial.

That doesn’t mean that Strike 3 isn’t prepared to fight cases tooth and nail though.

While most actions are quickly settled behind the scenes, some can face a spirited fightback from defendants. One such case has been running for more than two years already and has just taken a surprising turn, even by ‘copyright troll’ standards.

Case Background Against ‘John Doe’

The original lawsuit was filed in a Florida court against an anonymous defendant in March 2020 and was followed by a first amended complaint in August of the same year. According to Strike 3, the defendant used their Frontier Communications account to download and share 36 of its titles “over an extended period of time” using BitTorrent.

Also presented as evidence (reportedly collected by Strike 3’s ‘VXN Scan’ monitoring tool) are listings of BitTorrent activity from the same IP address allegedly sharing other rightsholders’ content. The titles are redacted from public records but the obvious suggestion is that infringement goes beyond the plaintiff’s titles.

In November 2020, the defendant answered the amended complaint, largely with denials or lack of knowledge, along with a counterclaim. It stated that since Strike 3 had failed to prove any infringement, the court should issue a declaration of noninfringement along with an award for damages, in the defendant’s favor.

Mediation in the case went nowhere, so once again Strike 3 went on the offensive with efforts to obtain information from third-party online services. That is not unusual in itself but Strike 3 appears to be pushing the boundaries way too far for the defendant.

Seeking Information From Google

In addition to seeking information from ISP Frontier Communications (which is standard in such cases), Strike 3 also wants access to huge amounts of the defendant’s user account data stored at Google.

Included in the request are all documents identifying the basic registration data for the Google account, all data that Google holds on the subscriber’s alternative email addresses, all IP addresses used to access the Google account since July 2019, all connection logs for the same period, plus records relating to purchases made on ALL Google services and products.

strike-demand-google

Strike 3 also wants the technical specifications of every device used by the defendant to access all Google services and products, documents identifying every single file uploaded to Google Drive, all videos uploaded to YouTube and – this is a scorcher – all records held by Google relating to internet searches made by the defendant for terms including ‘torrent’, ‘utorrent’ and ‘vpn’ dating back to July 2019.

This initial trove of personal information isn’t enough for Strike 3. It also wants access to the defendant’s Netflix account to obtain evidence relating to its adult movie lawsuit, despite Netflix carrying no pornography.

So What Information Does Strike 3 Want From Netflix?

The basic personal information Netflix holds on subscribers is detailed in a dedicated support page but like many similar platforms, Netflix also builds user profiles to feed its algorithms. This data includes user interactions (viewing history and ratings) plus specific preferences and tastes.

To somehow support its allegations that the defendant is responsible for seeding 36 adult movies using BitTorrent, Strike 3 wants all basic registration data from Netflix (full name, email address, phone number) plus additional information, including a list of devices used to access the service.

The adult movie company also demands “Clickstream Information”, i.e details of all actions taken by the defendant when logged in to Netflix. This includes profile and device names used, details of every Netflix page visited, the URL of the websites the defendant visited before accessing Netflix, plus dates and times when that happened.

In common with the subpoena Strike 3 wants to send to Google, a large proportion of the requested information from Netflix is redacted from the subpoena. However, we can still see that Strike 3 wants to dig deep into the defendant’s devices with requests to receive unique device identifiers, device manufacturers, manufacturers of specific components such as processors, and a whole lot more.

Things become even more intrusive with Strike 3’s demand to access the defendant’s gaming activities on Netflix including games played, playing session time length, and just about anything else the porn company can retrieve.

Unsurprisingly, the John Doe defendant is pushing back on this massive discovery effort.

Motion to Quash Google and Netflix Subpoenas

In a motion filed with the court, attorneys for the defendant say there is no need or good cause for the documents being subpoenaed, not least since they represent an invasion of privacy are not proportional to the needs of the case.

The first opposition against the Google subpoena lists many issues, noting that documents stored at Google would reveal private and personal information, including privileged communications with counsel. The request for YouTube data is “irrelevant” since there is no evidence of the defendant hosting infringing videos on the platform.

On the issue of search query data, the motion notes that such searches should be considered private as they can also contain “highly-personal and sensitive issues, such as confidential medical information, racial or ethnic origins, political or religious beliefs or sexuality..”

In respect of Netflix, the motion says the request to access “highly invasive personal information unrelated to the simple question of whether Strike 3’s movie data was downloaded on John Doe’s computer” is unacceptable, while access to gaming records is “irrelevant” as Strike 3 does not distribute games.

“There is no evidence that either Netflix or Google participated in the production, distribution, or financing of hard-core pornography. Instead, Strike 3 seeks irrelevant information from these two companies with the intent of harvesting John Doe’s personal account information from these two sources. This is manifestly an invasion of privacy. None of this personal account information is relevant to this case,” the motion reads.

In summary, John Doe’s attorney believes that no reasonable attorney could have a good faith belief that these broad subpoenas meet the proportionality requirements of the court. Strike 3 should be sanctioned and the court should quash the subpoenas, the motion adds.

The first amended complaint and answer here and here, subpoenas to Google and Netflix, and motion to quash (all pdf)

From: TF, for the latest news on copyright battles, piracy and more.

Lilbits: Intel Arc desktop GPU specs revealed (maybe), the smallest, worst HDMI display, and AYN Odin Lite handheld gaming device could ship soon

The makers of the AYN Odin began shipping versions of the handheld game console with a 6 inch display, Android 10 software, and a Qualcomm Snapdragon 845 processor to backers of a crowdfunding campaign in January. But the entry-level AYN Odin Lite with a MediaTek Dimensity 900 processor and Android 11 software has taken a […]

The post Lilbits: Intel Arc desktop GPU specs revealed (maybe), the smallest, worst HDMI display, and AYN Odin Lite handheld gaming device could ship soon appeared first on Liliputing.

The makers of the AYN Odin began shipping versions of the handheld game console with a 6 inch display, Android 10 software, and a Qualcomm Snapdragon 845 processor to backers of a crowdfunding campaign in January. But the entry-level AYN Odin Lite with a MediaTek Dimensity 900 processor and Android 11 software has taken a bit longer to finalize. Now it looks like the wait is almost over, and units could begin shipping to folks who reserved one for $199 or less.

AYN Odin

In other recent tech news from around the web, Intel told us this week that a Limited Edition Intel Arc desktop GPU is coming this summer, but the company hasn’t officially revealed any specs yet. Unofficially though, the company might have shown some off in a recent video demo for its Arc Control graphics management software. And a hardware hacker has made what might possibly be the smallest and least useful portable HDMI display.

Keep up on the latest headlines by following Liliputing on Twitter and Facebook and follow @LinuxSmartphone on Twitter and Facebook for the latest news on open source mobile phones.

The post Lilbits: Intel Arc desktop GPU specs revealed (maybe), the smallest, worst HDMI display, and AYN Odin Lite handheld gaming device could ship soon appeared first on Liliputing.