40 Jahre ZX Spectrum: Trotz Gummitastatur zum Erfolg

Der ZX Spectrum ist klein, preiswert und leicht zu bedienen. Für Sinclair war der Computer ein Glücksgriff, der den Niedergang des Unternehmens aber nicht verhinderte. Von Tobias Költzsch (Retrogaming, Computer)

Der ZX Spectrum ist klein, preiswert und leicht zu bedienen. Für Sinclair war der Computer ein Glücksgriff, der den Niedergang des Unternehmens aber nicht verhinderte. Von Tobias Költzsch (Retrogaming, Computer)

36 Jahre nach Tschernobyl

Zum Jahrestag der Reaktorkatastrophe warnen Umweltschützer vor einer Wiederbelebung der Atomkraft

Zum Jahrestag der Reaktorkatastrophe warnen Umweltschützer vor einer Wiederbelebung der Atomkraft

Tandis review: The ultimate geometry-based puzzle game

Pristinely disguised edutainment—and its creator clarifies game’s background math.

By moving simple shapes from one grid to the next, <em>Tandis</em> players can apply mathematical functions to their shapes and enjoy immediate shape-shifting results—all used to solve the game's tricky, unique puzzles.

Enlarge / By moving simple shapes from one grid to the next, Tandis players can apply mathematical functions to their shapes and enjoy immediate shape-shifting results—all used to solve the game's tricky, unique puzzles. (credit: Mahdi Bahrami)

The puzzle-gaming genre of "making shapes out of formulas" is currently ruled by a single designer. Five years after his last sensational stab at the genre, Iranian-born game-maker Mahdi Bahrami has returned with an even more impressive—and, at times, hair-pullingly difficult—puzzling masterpiece.

Tandis, out this week on both Steam and as a direct, DRM-free purchase for $15 (temporarily on sale for $13.49), is arguably the coolest execution of high-level math I've ever seen in a PC game. Even better, its challenge is disguised in the form of a tinker-toy. Hand this to any young, budding mathematician, and watch them get hooked on what's ultimately a brilliant edutainment gem in disguise.

Axes and allies

The beauty of Tandis comes from how it turns the formulaic manipulation of X, Y, and Z axes into a gaming mechanic. Typical education about mathematical formulas revolves around plotting solution results on a 2D grid to see what shapes they generate. That's fine enough—though doing this requires the mathematical grokking of a formula itself. But what if you could do this kind of thing much faster, and in 3D, by dragging shapes onto an easily understood series of grids, then watching them transform into fantastic new shapes in response?

Read 15 remaining paragraphs | Comments

Man Pleads Guilty to $23m YouTube Content ID Scam

A man at the center of a copyright scam that abused YouTube’s Content ID system to fraudulently obtain more than $23m to the detriment of artists has entered a plea agreement with the US government. Webster Batista Fernandez wrongfully claimed to own the rights to more than 50,000 tracks and illegally monetized user uploads for years.

From: TF, for the latest news on copyright battles, piracy and more.

Sad YouTubeYouTube’s Content ID is an advanced piracy recognition system that aims to flag videos or music on users’ channels uploaded without permission.

Once detected, such content can be removed or monetized at the discretion of the relevant rightsholders.

While Content ID is generally considered effective and financially useful for rightsholders, the system relies on the honesty of those allowed to use it. Rumors of abuse have circulated for years, with many reports of user videos being monetized by people that shouldn’t have the right to do so. A grand jury indictment unsealed late 2021 uncovered one such scheme.

Grand Jury Indictment

The case – United States of America vs. Webster Batista Fernandez and Jose Teran – detailed a massive Content ID scam that generated more than $20 million for the defendants. Between 2017 and April 30, 2021, Fernandez and Teran began monetizing music on YouTube for a vast library of more than 50,000 songs, none of which they owned the rights to.

Using forged documents and other means, the men (via their companies) represented to YouTube and an intermediary company that they were the owners of the music and therefore entitled to collect “royalty payments” from the platform. Over the course of almost four years via fraudulent transactions, the defendants generated millions of dollars, with some of the proceeds spent on property, sports cars, and jewelry. The artists who created the tracks got absolutely nothing.

Batista and Teran were charged with thirty counts of conspiracy to commit wire fraud, money laundering, and aggravated identity theft. The indictment also sought forfeiture of any and all property traceable to the pair’s offending.

Webster Batista Fernandez Confesses

On Thursday, the Department of Justice revealed that Fernandez has entered a plea agreement to dispose of the matter subject to specific terms and conditions. It carries the following confession:

I, Webster Batista Fernandez (BATISTA), Jose Teran (TERAN), and other co conspirators, worked together to monetize music on [YouTube] we had no lawful rights to monetize or otherwise control. Sometime in 2016, I discovered there were recorded songs of musicians and bands on the internet that were not being monetized. I began searching for these songs and uploading them to [YouTube], as mp3 files. I falsely claimed legal ownership over them and began receiving royalty payments.

In early 2017, Teran and I created an entity called MediaMuv L.L.C., for the purpose of falsely claiming large swaths of music recordings we had no legal rights to whatsoever. Teran and I were partners, and we co-owned and managed this illegal operation. Using MediaMuv, we entered a contract with Y.T. to utilize their content management system (CMS) to monetize music we purportedly owned and controlled. We also entered contract with a third-party company, A.R., to assist us in administering the music we fraudulently claimed.

According to the confession, Batista and Teran hired over five people to use a tool called ‘Heartbeat’ to scour YouTube for Latin music. When they found content that had not yet been monetized, they downloaded the songs in mp3 format and then reuploaded them to YouTube’s CMS to claim ownership and collect the royalties.

The fraudulent scheme netted more than $23.4 million.

Batista Will Plead Guilty

Fernandez will plead guilty to Count 1 and 2 of the indictment and the remainder of the charges (Counts 3 to 30) will be dismissed.

Count 1 charges Fernandez with Conspiracy (a Class D felony), in violation of Title 18, United States 23 Code (U.S.C.) § 371, punishable by a maximum fine of $250,000, up to five years in prison (or both), a maximum of three years supervised released and up to five years probation.

Charge 2 charges Fernandez with Wire Fraud (a Class C felony) in violation of Title 18, U.S.C. § 1343, punishable by a maximum fine of $250,000, up to 20 years in prison (or both), a maximum of three years supervised released and up to five years probation.

Fernandez will also be required to pay restitution (not to exceed $25 million) to all victims “directly or proximately harmed” by his “relevant conduct.” He is also required to make a “full accounting” of all assets in which he has an interest and must not sell, hide, waste, spend or transfer any asset before sentencing.

Real estate and land in Arizona, more than a million dollars in several bank accounts, a 2017 Tesla, and a 2014 i8 BMW, will be forfeited and not treated as satisfaction for fines, restitution, or any other penalties.

The plea agreement can be found here (pdf)

From: TF, for the latest news on copyright battles, piracy and more.

Hackers hammer SpringShell vulnerability in attempt to install cryptominers

Thousands of hack attempts made in the days following discovery of the vulnerability.

Hackers hammer SpringShell vulnerability in attempt to install cryptominers

Enlarge (credit: Getty Images)

Malicious hackers have been hammering servers with attacks that exploit the recently discovered SpringShell vulnerability in an attempt to install cryptomining malware, researchers said.

SpringShell came to light late last month when a researcher demonstrated how it could be used to remotely execute malicious code on servers that run the Spring model-view-controller or WebFlux applications on top of Java Development Kit versions 9 or higher. Spring is the most widely used Java framework for developing enterprise-level applications in Java. The framework is part of a sprawling ecosystem that provides tools for things like cloud, data, and security apps.

Earlier this month, security firm Trend Micro said it began detecting attempts. From April 1 to April 12, company researchers detected an average of roughly 700 attempts per day to exploit the vulnerability to install cryptomining software. By running the malware on powerful enterprise servers, criminals can mine Bitcoin or other types of digital cash using the resources and electricity of an unwitting victim.

Read 8 remaining paragraphs | Comments

MPA Wants Stricter Online Identity Checks to Catch Pirates

The Motion Picture Association (MPA) would like stricter identity checks to become part of a new trade agreement between the U.S. and the Indo-Pacific region. These new obligations should apply to hosting companies and other online services. In addition, the movie industry group would like enforcement tools and procedures to apply equally offline and on the Internet.

From: TF, for the latest news on copyright battles, piracy and more.

mpaOnline anonymity is a great good for many poeple but increasingly there are calls for stricter identity checks.

Such requirements are fairly common offline but on the Internet, they are relatively rare; for now at least.

Verified Identities

The Motion Picture Association (MPA) would like this to change. The organization is particularly concerned with website operators who use fake or unconfirmed identities to sign up with Infrastructure as a Service (IaaS) services.

The definition of IaaS services is open to interpretation but the MPA includes domain registrars, hosting companies, CDNs, and proxy services in this category. If these companies properly verified their customers, it would be easier to go after pirate site operators.

There is currently no legal obligation to carry out such thorough identity checks. However, the MPA believes that a new trade agreement between the US and the Indo-Pacific region, as proposed by President Biden last year, offers an opportunity for change.

IPEF Trade Agreement

In a letter sent to the US Trade Representative, which co-chairs the U.S. during the Indo-Pacific Economic Framework (IPEF) negotiations, the movie industry group mentions verification as a key negotiation item.

“Commercial entities that intentionally distribute illegal and harmful services or content online tend to hide their true identity when they sign up for online services, such as web hosting. This anonymity complicates law enforcement efforts to the detriment of consumers..,” the MPA writes.

“By verifying and retaining the identity of business customers, IaaS providers can help deepen consumer trust in the safety and security of the online marketplace,” MPA’s letter adds.

The MPA mentions malware, data theft, and unsafe products and services as examples of concrete threats. However, we assume that online piracy is one of the main concerns for the movie industry group.

Online and Offline Enforcement

Piracy is also mentioned more directly in another suggestion for the IPEF agreement. According to the MPA, a trade deal should include a specific obligation that offline enforcement tools and procedures are also available in the digital environment.

“Piracy services steal and disseminate content, depriving creators of millions of dollars in fair remuneration that they would otherwise use to fund U.S. production and employ thousands of Americans.

“Including a provision in IPEF to help ensure the full availability of online enforcement tools would respond to the harm of digital piracy on the U.S. economy and U.S. workers,” MPA notes.

The IPEF is far from a done deal. A broad variety of stakeholders and members of the public have submitted their suggestions. It is now up to the negotiators to come up with a draft that will offer the best benefits.

A copy of MPA’s letter, written by Senior Vice President Global Policy and Federal Affairs Anissa Brennan, is available here (pdf)

From: TF, for the latest news on copyright battles, piracy and more.

Army of worm larvae hatch from man’s bum, visibly slither under his skin

Doctors watched the shifting rash blanket his body in rare hyperinfection.

A <em>Strongyloides filariform</em> larva.

Enlarge / A Strongyloides filariform larva. (credit: Getty | BSIP)

Doctors in Spain diagnosed a man with an unusual roundworm infection after watching an army of larvae writhe and slither under his skin, blanketing his whole body in an ever-shifting rash.

Doctors reported the man's rare hyperinfection this week in the New England Journal of Medicine, highlighting the unusual sight of a wriggling, sliding skin rash that tracked the movements of individual parasitic prowlers. The official diagnosis was larva currens from Strongyloides.

The unfortunate patient appeared to have a perfect storm of risk factors to develop the uncommon and unpleasant infection. The 64-year-old worked in sewage management and had previously been diagnosed with metastatic lung cancer. For three years prior, doctors had noted bouts where he had eosinophilia—unusually high levels of disease-fighting white blood cells—which can be an indicator of a parasitic infection.

Read 4 remaining paragraphs | Comments

Insteon finally comes clean about its sudden smart home shutdown

Insteon blames the pandemic and lack of a buyer for its sudden shutdown last week.

The lighting puns write themselves.

Enlarge / The lighting puns write themselves. (credit: Insteon)

Smart home company Insteon and its parent company, Smartlabs Inc., suddenly disappeared last week. In what will probably be remembered as one of the most notorious smart home shutdowns ever, Insteon decided to turn off its cloud servers without giving customers any warning at all, surprise-bricking many smart home devices that relied on the Insteon cloud.

Insteon CEO Rob Lilleness didn't respond to any media questions about why his company suddenly abandoned its customers, choosing instead to scrub his LinkedIn page of information. First, the absentee CEO removed his role at Insteon from LinkedIn, and then he cut his name and picture. Finally, he deleted his entire LinkedIn account. (An archive of Insteon's "Leadership" page, starring Rob Lilleness, has been preserved here for posterity.)

Insteon has finally updated its website (archive here) and pinned a goodbye message to the top of every page a full week after its surprise liquidation. The statement—which is not attributed to anyone—says that the company is going out of business because of the pandemic and supply chain problems. The company looked for a buyer but couldn't find one.

Read 4 remaining paragraphs | Comments